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Mobile fraud detection is a 
new avenue for developers 

Warning flags raised over unchecked exploits 

BY ALYSON BEHR 

It's a good time to be a mobile developer no matter how you look 
at the opportunities. But if you want to go for the low-hanging 
fruit, look at developing robust fraud detection tools focused on 
mobile e-commerce. 

According to a recent paper by Gartner's William Clark, devel- 
opment for fraud detection tools to enforce mobile e-commerce 
transactions are behind the delivery curve. 

"Enterprise applications must detect fraud in these mobile 
environments, but fraud detection tools available today that work 
in [wired] computing environments don't work well or at all in the 
mobile world," Clark said. Tools to detect fraud in the mobile 
space are in the early stages of development, and he estimated it 
will take until at least 2012 for them to mature. 

Clark said that due to the improving browser experiences on 
smartphones, mobile commerce and transaction executions are set 
to rapidly increase. Gartner estimates that by 2014, about 12% of 
all e-commerce transactions will be made using smartphones and 
other mobile devices. 

Gartner encourages CIOs to start taking a hard look at the 
fraud tools under development as they consider launching mobile 
payment systems. He warns that enterprises must have mobile 
fraud prevention systems in place to remain competitive. 

Three types of fraud prevention methods are currently 

continued on page 23 ► 



Oracle holds back a 
bit on JDK 7 plans 

Closures, modularity scrapped in 2011 release 



BY ALEX HANDY 

Oracle is going with Plan B for 
JDK 7. 

Thomas Kurian, executive 
vice president of Oracle, took the 
stage at Oracle OpenWorld and 
JavaOne on to remove the uncer- 
tainty that has surrounded the 
Java platform since Oracle closed 
its acquisition of Sun Microsys- 
tems earlier this year. 

"I've been at JavaOne since 
1997," said Kurian, "but this year 
is very special for us because it is 
the first year that Oracle is the 



steward and responsible for Java. 
What we want to do today is to 
make sure every developer is 
crystal clear on where we see the 
Java platform evolving." 

Plan B calls for the elimination 
of projects Coin, Jigsaw and 
Lambda from the JDK 7 release 
train. This will push forward the 
completion date of JDK 7 to some 
time in 2011, and allow the Oracle 
team to push for JDK 8 in 2012. 

Those three lost features will 

be pushed into JDK 8, according 

continued on page 26 ► 




Oracle's Kurian said the delayed 
pieces for JDK8 will come in 2012. 
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Aside from looking at cost, the CAST study also found that COBOL scored the 
highest among programming languages for security. 



BY KATIE SERIGNESE 

If your organization has an appli- 
cation with approximately 
374,000 lines of code, you can 
expect a technical debt — the cost 
to fix problems that remain in an 
application once it is opera- 
tional — of about US$1 million, 
according to the first CAST 
Worldwide Application Software 
Quality Study, which was 
released in September. 

CAST, a provider of software 
analysis and measurement solu- 
tions, arrived at that figure using 
$75 as the average hourly wage of 
continued on page 22 ► 
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RIM calls developers back to BlackBerry 

Former smartphone leader unveils host of services and tools at conference 



BY ALEX HANDY 

In an effort to regain its position 
among smartphones, BlackBerry 
maker Research In Motion spent 
much of the first day of Black- 
Berry DevCon revealing new 
tools and services aimed at draw- 
ing mobile developers away from 
the Android and iPhone and 
back to BlackBerry. Chief among 
these developer-focused offer- 
ings are a new ad network, a 
Web application development 
tool, an Eclipse plug-in, and a 
new analytics service. 

Earlier this year, Apple and 
Google both unveiled new ad 
networks from which mobile 
application developers can pull 
down advertisements to display 
within their applications. RIM 
now will provide that as well, let- 
ting developers take 60% of ad 
revenues from in-app ads in line 
with Apple and Google. 

RIM also announced that its 
analytics service will allow devel- 
opers to push information on 
usage out of their applications. 
This and the new ad network are 
both designed to be simple to 
implement, according to RIM. 
Specifically, advertisements can 
be added to an application with 
only three lines of code, said 
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Also at BlackBerry DevCon, RIM introduced the BlackBerry PlayBook, a 
tablet aimed at business users. 



Tyler Lessard, vice president of 
global alliances and developer 
relations at RIM. 

But RIM wasn't only talking 
about developer revenue-gen- 
eration tools. The company also 
unveiled BlackBerry Web- 
Works and BlackBerry Enter- 
prise Application Middleware 
(BEAM). WebWorks is a new 
set of development tools aimed 
at Web developers who want 
to build BlackBerry applica- 
tions. Portions of WebWorks are 
open source and available on 



GitHub under the same name. 
WebWorks allows developers to 
use HTML 5 and JavaScript to 
write applications that can take 
advantage of BlackBerry capa- 
bilities, such as calendaring, e- 
mail and push technologies. 

BEAM, on the other hand, is 
designed to allow enterprise 
developers to build end-to-end 
BlackBerry applications. 

Alan Brenner, senior vice 
president of BlackBerry plat- 
forms, said that BEAM solves 
many integration and security 



problems that make it difficult 
to offer internal enterprise ser- 
vices to external mobile devices. 
"We provide on the device a 
client-customizable container 
that enables most of the integra- 
tions for you in the core data- 
base," he said. 

"On the middleware side, we 
provide a set of libraries that can 
be hosted on any Java applica- 
tion server. They handle for you 
a number of the difficult tasks 
developers normally have to 
handle, in particular BlackBerry 
push technologies." 

Mac users also got a boost at 
the BlackBerry DevCon. RIM 
made available a technology 
preview of its new Eclipse plug- 
in for Mac, which will allow 
developers to create Java-based 
applications for BlackBerry 
devices on Mac OS X. A beta 
release of this plug-in should be 
available later this year. 

RIM will be pushing its App 
World app store more heavily in 
coming months. The company 
has worked on making App 
World easier to use and is waiv- 
ing all fees for developers who 
want to put their applications in 
the BlackBerry app store. Addi- 
tionally, App World will offer 



70% of application sales rev- 
enues to developers. 

Brenner insisted that open- 
ing the BlackBerry platform to 
third-party applications would 
not compromise the security of 
this enterprise platform. To do 
this, he said the company has 
created a dual-persona model 
for data storage on devices, 
"with support in the BlackBerry 
Enterprise Server. This allows 
enterprises to protect enterprise 
data without having to inhibit 
the personal use of the device. 

"With dual persona, enter- 
prise data is protected. We limit 
the ability of the user to move 
data across the enterprise realm 
to the personal domain." 

Dual persona will keep 
enterprise data on the server, 
where third-party applications 
cannot access it without autho- 
rization, said Brenner. 

Finally, RIM announced that 
BlackBerry Messenger, its social 
network for BlackBerry users, 
would be opened to third-party 
application developers. BBM 
will be available to allow them to 
use peer-to-peer connections to 
other BlackBerry users, and will 
offer messaging and matchmak- 
ing services for games. I 



Business needs drive change to enterprise architecture 

Experts see a move away from static approaches to more flexibility 



BY KATIE SERIGNESE 

For years, enterprise architec- 
ture (EA) has been readily 
accepted as a way to establish 
best practices for organizing an 
entire enterprise, experts said. 
But as an agile mentality seeps 
into organizations, EA now has 
to come up with the best way of 
enabling technology to meet 
changing business needs, "and 
it's the changing bit that is real- 
ly key to new developments in 
enterprise architecture," said 
Jason Bloomberg, managing 
partner at consultancy firm 
ZapThink. 

"The old approach was 
much more static," he said. "It 
was, 'Assume we have a fixed 
business model and how can 
technology meet its needs?' to 
now saying, 'Business needs 
always change, and it involves 
changing how we think about 
architecture.' " 

Older frameworks, such as 



the Zachman Framework, only 
address "day one" and not the 
long term, he added. "Funda- 
mentally, the Zachman Frame- 
work is ontology rather than a 
methodology. That is, it helps 
you organize concepts without 
telling you what to do with the 
concepts." It leaves a gap 
between the artifacts and actual- 
ly helping the business achieve 
what it wants to do, Bloomberg 
wrote in "The Beginning of the 
End for Enterprise Architecture 
Frameworks." 

He added that the addition 
of a methodology as a means 
for implementation of business 
goals could help, but he added 
that "a methodology will still 
not get you where you want to 
go. You still have a gap 
between the technology meet- 
ing the needs of the business 
when you assume they are 
always changing. 

Colin Devonport, an enter- 



prise architecture segment 
manager at IBM, said, "The 
premise is to make sure busi- 
ness goals become actionable 
plans that you can drive to 
obtain their benefits." 

Once an organization is clear 
on its goals, it has to look at indi- 
vidual options to see the impacts 
and decide what the best way is 
to go forward with the architec- 
ture, he explained. "But you 
can't stop there. You have to be 
able to bridge these plans into 
the rest of the IT organization. 

"It's really about getting to 
the business value, and there- 
fore you have to apply a long- 
lived method to associate with 
that," Devonport added. 

One approach that fuses 
ontology and methodology is 
Pragmatic Enterprise Architec- 
ture Framework (PEAF). 
Founded by software architect 
Kevin Smith, PEAF started in 
fragments in 2002 and has 



become a complete framework, 
with version 2 introduced in 
March of this year. 

According to Smith, dis- 
course in the enterprise archi- 
tecture community about the 
best way to do EA comes from 
the confusion between what it is 
and what it really means. "A lot 
of people, when they use the 
word 'framework,' they mean a 
set of pegs on which you can 
hang things. Essentially, that is a 
metamodel. It describes the 
information that you might gath- 
er and put in an enterprise 
architecture," he said. 

"When I use the word 'frame- 
work,' I use it in a looser way. For 
me, it's a collection of things, one 
of which is a metamodel, as well 
as processes, products, tem- 
plates, etc." 

PEAF includes templates 
for preparation work, processes 
for the implementation stage 
(such as mitigating risk and set- 



ting up EA tools), to processes 
in the last phase (called "oper- 
ate"), where EA is actually 
done, he said. 

However, no matter how EA 
is defined or approached, there 
is no one right way to do it, and 
"though EA fundamentalists 
will argue that frameworks are 
an essential part of EA, I see 
them more as a tool," said Jeff 
Scott, an analyst with Forrester 
Research. 

He added: "I haven't seen any 
data that suggests one or another 
framework has a significant 
impact on EA success. The real 
question is not how we build EA, 
but how we implement it." 

But to Bloomberg, new 
implementations of EA need to 
factor in constantly changing 
business needs. "Agility is a 
requirement just like other 
requirements," he said. "Now 
it's, 'Build me something that 
changes as my needs change.' " I 
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PostgreSQL database garners new attention 

Release 9.0 reflects growth due to economy, uncertainty surrounding MySQL 



BY DAVID RUBINSTEIN 

The open-source PostgreSQL database 
project reached version 9.0 in Septem- 
ber, with the inclusion of highly antici- 
pated streaming replication and hot- 
standby capabilities topping the list of 
feature enhancements. 

Simon Riggs, lead contributor to the 
hot standby feature, and CTO of Post- 
greSQL training and services company 
2ndQuadrant, said that "efficient, low- 
latency streaming replication protects 
your data better, while hot standby sig- 
nificantly reduces total cost of owner- 
ship." He said that in proprietary data- 
base products, this capability can cost 



thousands of dollars to add on. 

Other key enhancements include an 
upgrade to the upgrade-in-place securi- 
ty feature and 64-bit Windows support 
for better performance. Version 9.0 has 
an unprecedented number of major new 
features, which the PostgreSQL Global 
Development Group said is due to the 
accelerating growth of the contributor 
community over the past year. 

Bruce Momjian, a senior database 
architect with PostgreSQL database 
provider EnterpriseDB and author of 
"PostgreSQL: Introduction and Con- 
cepts," said three factors came into play 
around the database projects growth. 



Making enterprise 
search a bit more Lucid 

Lucene-based solution offers developers 
easier path to configuration 



BY ALEX HANDY 

As an Apache project, Lucene has been 
a bit like Rodney Dangerfield: It gets no 
respect. While some die-hard faithful 
cling to this Java enterprise search 
library, many developers were alienated 
by the difficulty of using and configuring 
this open-source tool. So, Lucene was 
festooned with Solr, a search server 
based on Lucene. 

Now, Lucid Imagination, a company 
founded to support and develop soft- 
ware based on Lucene, hopes to push 
the project even further into enterprises 
by meeting developers halfway. 

David Fishman, vice president of 
marketing at Lucid Imagination, said this 
was the goal of LucidWorks Enterprise, 
the company's first enterprise product 
offering based on Lucene and Solr. 
"There's demand for a better integrated 
package to simplify how developers can 
build search applications," he said. 

"We hear from developers: Thank 
god for Solr, because Lucene was too 
hard.' Developers also wanted a [better- 
maintained] package, so we hope to 
raise the bar there. 

"We're also adding additional func- 
tionality to make it easier for developers 
to get their work done. We're adding 
features to LucidWorks Enterprise, like 
a REST API to allow you to configure 
and control your Solr search engine in a 
more stateful, more robust fashion. 
Another thing we're doing is organizing 
the product with smarter defaults." 

That last point comes from finding 
customers who would install the server, 



then leave it as is without configuring it 
properly. Overall, the focus of this new 
release, said Fishman, is making life eas- 
ier for developers who want to build 
enterprise search applications. 

To that end, LucidWorks Enterprise 
includes pre-written code to handle 
some common search needs, said Fish- 
man. For example, LucidWorks Enter- 
prise can flag data that is useful for 
analysis. This, he said, is the behavior 
that allows Netflix to see which movies 
are popular in which genres. 

The search platform also includes 
software for tracking new information 
and generating alerts. Brian Pinkerton, 
chief architect at Lucid Imagination, 
said that a big problem for Lucene and 
Solr, until now, has been acquiring and 
entering data into the search system. 

"It's a great search application, but 
you have to bring the data and present it 
to Solr," he said. "We've added some 
fairly simple collectors that allow you to 
get data from the three sources most 
commonly used: databases, file systems 
and Web crawling." 

Fishman said that a primary differen- 
tiator for LucidWorks Enterprise is its 
pricing. Licenses range from US$38,000 
per year for a 10-seat development 
license, to $96,000 per year for enter- 
prise deployments of two servers with 
24x7 support. Additional servers cost 
$1,000 per server per year. 

Fishman said that Lucid Imagination 
is hoping to beat the competition on 
price, which some charge based on the 
number of documents indexed. I 



The first is the poor econo- 
my, which is forcing compa- 
nies to reconsider large data- 
base software purchases. 

Second is uncertainty 
surrounding MySQL, anoth- 
er leading open-source data- 
base that Oracle acquired 
when it closed its purchase 
of Sun Microsystems in Jan- 
uary. But Momjian asserted 
that "Postgres is more fea- 
ture-rich and reliable than 
MySQL, so the switch also is 
[from] people doing data- 
base migrations to Postgres 
that they knew they would have to do 
eventually anyway." 

Finally, the new features in 9.0 are 
addressing the few remaining ease-of- 
use problems that have existed, such as 
easy replication, in-place upgrades, and 
others. "We kind of know what big fea- 
tures people are waiting for, and for 9.0, 
we had additional manpower (because 
of our popularity) that allowed us to 
deliver much of that in one release, 
which is why this release is getting so 
much attention," Momjian added. 




EnterpriseDB's Bruce Momjian attributes easy replication, 
in-place upgrades and others to PostgreSQL's growth. 



PostgreSQL has more than 20 years 
of engineering behind it, and it has 
emerged as a leading alternative to 
commercial SQL databases since the 
European Commission declared the 
database is robust enough to serve as an 
open-source alternative to Oracle data- 
bases, including MySQL. The Oracle 
acquisition of Sun was held up for a 
time amid fears that Oracle would shut 
down the MySQL open-source database 
project and leave users without another 
enterprise-ready open-source choice. I 
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Apigee Premium offers rate limiting and other API management options for medium-sized 
companies with APIs. 

Apigee launches new 
API management service 

Former Sonoa Systems offering 
includes caching, key provisioning 



BY ALEX HANDY 

Using APIs has become second nature to 
developers, but creating and hosting them 
is still an evolving science. To this end, 
Apigee (known as Sonoa Systems until 
today) has built services that can be used 
to manage and monitor hosted APIs. 

Apigee Premium is the name of the 
company's third API management ser- 
vice, following Apigee Free and Apigee 
Enterprise. Apigee Premium is a subset 
of Apigee Enterprises features, and it is 
targeted at smaller companies with sim- 
pler needs. Apigee Premium offers rate- 
limiting and usage statistics for hosted 
APIs on a subscription basis, costing 
between US$50 and $500, depending on 
the included options. 

Sam Ramji, vice president of strategy 
at Apigee, said that Apigee Premium 
was created to offer popular features to 
companies that didn't need to pay for 
enterprise-class and enterprise-priced 
software. He said Apigee Premium 
offers the most popular API manage- 
ment features, but at a lower price point 
than Apigee Enterprise, which can 
range from $3,000 to $6,000 per month. 

"One is caching, another is IP-based 
or developer-key-based rate limiting, 
and the ability to provision keys via the 
API," said Ramji about the features 
offered. "We can decorate the API with 



those keys and enable you to apply poli- 
cies within Apigee to those requests. 
The other policies are targeting differ- 
ent end points. This allows you to have 
one server doing your API for your very 
strategic developers, and maybe another 
server for the regular users." 

Among those capabilities is API key 
generation. For developers using a more 
advanced API from sites like Flickr or 
Google, generated API keys can be used 
to validate feeds and to determine which 
user's applications are currently accessing 
the API. Using these keys is common- 
place with Web services like Facebook 
and WordPress, but generating and keep- 
ing track of these keys can be a pain. 
Thus, Apigee handles this for developers. 

Once those keys are created and 
used, Apigee can then track who uses 
what services, giving both operations 
and development a window into their 
API usage. This, said Ramji, will allow 
developers to monetize their APIs. 

"We enable Twitter-like business 
models where you have a low- value, 
large user base inputting data into the 
system," said Ramji. "We're trying to 
enable API business models. When peo- 
ple are making money off of their APIs, 
they get interested in providing different 
levels of services and tying that all back 
to analytics." I 
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The Portland Group is developing a CUDA C compiler targeting 
x86/x64 systems. The PGI CUDA C compiler for x86 platforms will 
compile and optimize CUDA applications to run on x86-based work- 
stations, servers and clusters with or without an NVIDIA GPU acceler- 
ator. When run on x86-based systems without a GPU, PGI CUDA C 
applications will use multiple cores along with the streaming SIMD 
capabilities of AMD and Intel CPUs for parallel execution . . . Three 
Rivers Consulting is now shipping its continuous testing plug-in for 
Eclipse. The first commercial release, JUnit Max 1.2, costs US$100 
per year for single licenses. Every time developers save a Java file, 
JUnit Max runs the automated test and report errors in the same for- 
mat as compiler errors. To provide dev teams with fast, relevant feed- 
back, the software runs short tests before running long ones, and gives 
priority to tests that have recently failed as well as to tests for newly 
written or changed code . . . AMD and Sage Electronic Engineering are 
offering Sage SmartProbe, which gives software engineers a hard- 
ware interface to evaluate the system under development at every 
stage in the design cycle. It allows graphic visualization of the entire 
embedded system operation, including code flow, register access, 
memory movement, multicore execution and peripheral access. 
SmartProbe can also help speed up the gualification process for test 
and production teams. The probe works with AMD's x86/x64 systems. 



UPDATES 



Klocwork's static code analysis engine, Truepath, has been enhanced 
to address two issues related to multicore development: Endian incom- 
patibilities for applications that span heterogeneous processor archi- 
tectures, and concurrency defects. These new capabilities will be gen- 
erally available as part of Klocwork Insight 9.2 .. . AQtime Pro 7.0, a 

continued on page 18 ► 



Atlassian throws its weight 
behind Mercurial SCM 



BY ALEX HANDY 

When it comes to modern, open- 
source distributed SCM systems, 
its really a battle between Git 
and Mercurial. While both of 
these projects are popular 
already, Git has found its cham- 
pion in GitHub and a cavalcade 
of dedicated users. Mercurial, on 
the other hand, is without a 
major sponsor. In September, 
Atlassian changed all of that by 
purchasing Bitbucket.org. 

Bitbucket is a code repository 
hosting service along the lines of 
GitHub and SourceForge. But 
Bitbucket is based on Mercurial. 
Atlassian's decision to purchase 
the company came from its lack 
of an SCM system within its 
development tool chain. 

"We do believe it's a pretty 
obvious acquisition," said Jay 
Simons, vice president of sales 
and marketing at Atlassian. "A 
small team that's starting out 
needs a place to dump code and 
a place to keep track of what's 
going on. We built a business 
on the latter, but we haven't had 



a place for developers to put 
code." 

With the purchase of Bit- 
bucket, Simons said Atlassian is 
gaining a team of Mercurial 
experts. That move also heralds 
a future for the company based 
on Mercurial, though Atlass- 
ians tools will still remain SCM 
agnostic, said Simons. 

"We've taken a really close 
look at Mercurial and Git, and 
we believe that Mercurial is a 
better technology for enterprise 
adoption and enterprise version 
control," said Simons. "We're 
making an investment in Bit- 
bucket and Mercurial across our 
tools, but we want to be agnostic. 
We support both Git and Mercu- 
rial today in our products." 

After the acquisition is com- 
plete and the Bitbucket site 
comes back online later tonight, 
Atlassian will be changing the 
pricing structure for the ser- 
vice, said Simons. 

"If you look at most of the 
code collaboration services on 
the Web, they let you dump 



your code there if you have an 
open-source project," he said. 
"One thing we're announcing is 
that the pricing model will 
change. We're turning it on its 
head. Instead of charging for a 
number of private repositories 
or the amount of storage you 
use, we're going to charge 
based on the number of devel- 
opers that use the service. 

"It's free for a five-developer 
account, with unlimited private 
and public storage. It's free for 
open-source projects, too. If 
you want to take a project pri- 
vate and have 10 people who 
work on that code, it will be $1 
per person per month." 

Overall, said Simons, this 
acquisition is a direct result of 
Atlassian's recent round of 
funding by Accel Partners. That 
money allowed the purchase of 
Bitbucket, and Simons said it 
will help to meet the company's 
ultimate goal: "What Adobe 
does for designers, we want to 
do for technical teams building 
something." I 
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InterSystems improves Java support in Cache 

New release lets developers open a tunnel into database kernel for server-side access 



BY ALEX HANDY 

Storing and dealing with data 
is only becoming more com- 
plex for developers with every 



passing day. In September, 
InterSystems updated its 
Cache database to make this 
task easier for Java developers. 



While Java has been supported 
by Cache for many years, the 
2010 release brings with it 
first-class access to all of the 



database's capabilities to Java, 
for the first time. 

Robert Nagle, vice president 
of product development at 
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InterSystems, said that the 
2010 release of Cache contains 
hundreds of feature updates 
and fixes. He said the 2010 
release includes database-mir- 
roring capabilities for the first 
time. This allows multiple data- 
bases to be redundant and to 
communicate solely over TCP. 
This cuts the costs of replica- 
tion and scalability, said Nagle. 

But the biggest change for 
the 2010 release of Cache is 
around Java support, said 
Nagle. Prior to this release, he 
said, developers had to 
embrace the InterSystems pro- 
gramming model in order to 
take full advantage of Cache. 
But with the 2010 release, Java 
developers can break free of 
those shackles in a manner sim- 
ilar to the way the company 
introduced first-class C + + sup- 
port a few years back. 

"What we wanted to do is 
give that power and richness to 
other classes of developers, 
because we know we are 
excluding some people," said 
Nagle. "They're wedded to Java 
or to .NET. What this does is it 
marries the richness of the Java 
environments with the richness 
of the Cache environments. 

"Java developers can now 
open a tunnel into the Cache 
kernel and have access to 
everything on the server-side 
of Cache. We're particularly 
focused on problems where 
today Java developers are 
using some kind of in-memory 
solutions where there are high 
rates of data integration. 
Today, people can't do that 
with persistent databases, so 
they are building the ad hoc 
solutions." 

While Cache did support 
Java previously, Nagle calls the 
2010 update a major upgrade 
for Java developers. "We didn't 
have the power of Java before. 
It was like a client/server 
model, with some overhead 
of connecting to it. It was 
focused on an object model, 
but didn't give you the 
duality of the object and SQL 
model, as well as direct access 
to the underlying data with 
Java. This is like upgrading 
Java from stone wheels to 
pneumatic tires." 

Cache pricing ranges from 
US$220 to $1,380 per user, and 
the upgrade is available now. I 
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Oracle's first steps into the cloud come with contradictions 



BY ALEX HANDY 

Oracle OpenWorld was a study 
in contradictions. On Sunday 
night, Oracle CEO Larry Ellison 
publicly bad-mouthed Sales- 
force. com, claiming that the 
SaaS CRM provider was "not 
cloud." On Wednesday morn- 
ing, Salesforce's CEO Marc 
Benioff spoke, and he took issue 
with Ellisons disparagement. 

Elsewhere, Intel discussed 
its work with Oracle to optimize 
Java platforms, while Oracle 
touted its newly acquired 
SPARC line of processors as the 
fastest in the world. 

With these Janus-like contra- 
dictions, Oracle took its first 
steps into the cloud market by 
unveiling what Ellison referred 
to as "cloud in a box." The com- 
pany's new Exadata servers offer 
provisioning and data manage- 
ment capabilities that compare 
it to cloud environments from 
VMware and other data center 
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JRapid 1.0 was demonstrated at JavaOne. The software includes a Web-based IDE for 
building point-and-click Java applications. 



operating systems companies. 

Oracle also announced some 
plans for Solaris 11, which will 
arrive in 2011, bringing with it 
an updated packaging system, 
performance enhancements, 
and the new Fast Reboot tech- 
nology that allows crashed sys- 
tems to recover in seconds. 



As for Oracle s other operat- 
ing system, Oracle Enterprise 
Linux, the company has broken 
with its past of rebranding Red 
Hat Linux. Oracle Trusted Lin- 
ux will now use more-recent 
kernels than Red Hat Enter- 
prise Linux, starting with the 
current release based on the 



JAVAONE ROLLOUTS 

JavaOne occurred 
simultaneously with 
Oracle OpenWorld 
this year. 

At JavaOne, JRapid 
1.0 was on display in 
the expo hall. JRapid is 
a rapid development 
platform for develop- 
ers who want to work 
in Java, but don't want 
to write any code. It 
consists of an extreme- 
ly advanced Web- 
based IDE that can 
generate Java code based on the 
needs of a developer. This 
includes automatic generation of 
database connections, table 
insertions and UI design. 

Quest was on hand to demon- 
strate its new Eclipse plug-in for 
its Toad family of products. The 
new Eclipse plug-in allows 



Quest developers to quickly cre- 
ate database-backed applications 
with point-and-click simplicity. 
Toad Extension for Eclipse is 
available now for free. 

Newcomer development 
tools company Particle Code 
demonstrated its development 
system designed to simplify the 
creation of cross-mobile plat- 
form applications. Applications 
written in Java or Objective-C 
can be automatically translated 
back and forth, letting develop- 
ers write an application for the 
iPhone and automatically trans- 
late it to work on Android. Parti- 
cle Code will enter general avail- 
ability later this year, and the 
public beta of the platform was 
announced at the show. 

Finally, Java fans will be 
happy to know that Duke, the 
Java mascot, lives on. The only 
change since he joined Oracle 
is that he now no longer poses 
for photos on the show floor. I 



JNBridge hopes lightning' 
strikes for cloud users 

New software claimed to be a first step 
toward a hardware abstraction layer 



BY DAVID RUBINSTEIN 

Java-.NET interoperability soft- 
ware provider JNBridge has 
released what it has called "Pro- 
ject Lightning," a solution for 
bringing interoperability to the 
cloud. 

At the JavaOne conference, 
the software solution was 
demonstrated as a possible first 
step toward a so-called hardware 
abstraction layer, enabling appli- 
cations originally written for 
client/server deployment to be 
deployed into a cloud environ- 
ment. 

When talking about cloud 
interoperability, JNBridge CTO 
Wayne Citrin said people usual- 
ly are referring to two things: 
Can you access a server from a 
client running on any platform, 
and can you write a cloud ser- 
vice regardless of provider? "So, 
the question is, can I access a 
[Windows] Azure service from a 
Java application, or can I use 
.NET to write a service for the 
Amazon platform?" he said. 



Cloud providers are produc- 
ing APIs targeting multiple plat- 
forms, which creates interoper- 
ability for new applications. This 
doesn't help with the migration 
of existing applications to the 
cloud, Citrin said. 

"If an app is installed [on a 
server] with the Microsoft 
installer, you can't just upload it 
to an Azure cloud," he said. 
This, he explained, is because 
these client-server applications 
depend upon the underlying 
platform. 

"A Java app may want to ref- 
erence a file system, or a .NET 
app wants to access a registry. 
This won't work in the cloud." 

Part of the problem is that 
companies that have been sell- 
ing enterprise software have 
controlled both the client and 
server side, and have sold soft- 
ware for both. This works 
against the promotion of inter- 
operability, Citrin said. With 
cloud services, software 
providers make money on usage. 



Companies that are pure 
cloud plays understand this bet- 
ter than those "with one foot in 
the old client/server world," he 
said. Microsoft, for instance, 
claims Java-.NET cloud inter- 
operability by demonstrating 
the Apache Tomcat server run- 
ning on the Azure cloud, he 
said. 

"It's the Tomcat Solution 
Accelerator, and it's heinous," 
Citrin said. "There is no [Ora- 
cle] WebLogic accelerator, no 
[IBM] WebSphere accelerator, 
no JBoss accelerator. What 
[Microsoft] has done is con- 
strained, so very few Java apps 
will run in Azure. And even 
then, it requires a tremendous 
amount of retrofitting." 

The JNBridge solution pro- 
vides a proxy box that runs in 
the cloud, and it includes a JAR 
file containing client stubs, a 
config file that Citrin said "tells 
Java where the .NET stuff is," 
and runtime components. "We 
know where in the cloud what 
port is listening and where the 
library is," he said. 

JN Bridge's own software 
relies heavily on a registry for 
things like licensing, he said, 
and "now we ripped it out and 
are rearchitecting it for a cloud 
environment. We had to change 
the management of TCP end- 
points." I 



Actuate delivers BIRT-based 
business intelligence suite 



BY KATIE SERIGNESE 

With the Eclipse BIRT open- 
source project at the core, 
Actuate introduced at JavaOne 
its business intelligence prod- 
uct suite, ActuateOne. 

ActuateOne deploys busi- 
ness intelligence and informa- 
tion applications from on 
premises to all cloud architec- 
tures via BIRT iServer Release 
11, which now includes elastic 
clustering to adjust iServer 
roles for response to capacity 
and application requirements. 

Also part of BIRT iServer 
and the ActuateOne suite are 
the BIRT Data Analyzer and 
BIRT 360. The new in-memory 
capabilities in the BIRT Data 
Analyzer help business users 
uncover trends, identify anom- 
alies and model scenarios for 
business forecasting. 

BIRT 360 enables users to 
create dashboards. By utilizing 
the Google Gadget specifica- 
tion, users can leverage third- 
party Google Gadgets as well as 
BIRT-based gadgets for mashup 
applications. The tool also 
enables two types of dashboards: 
operational and analytic. 

The operational dashboard 



interface is designed for business 
users to create custom dash- 
board pages without IT interven- 
tion, and it enables continuous 
monitoring of key performance 
indicators. BIRT 360 analytical 
dashboards are visual data explo- 
ration applications that allow a 
business owner to filter through 
data, said Mark Gamble, senior 
technical marketing manager at 
Actuate. 

ActuateOne's foundation is 
the open-source BIRT design, a 
common design environment 
that uses a Web-based design 
metaphor for content creation, 
the company said. 

"We don't want to use many 
separate tools," said Nobby Aki- 
ha, Actuates senior vice presi- 
dent of marketing. "That's why 
ActuateOne is based on the 
idea of one design, one server 
and one user experience." 

This enables multiple ways to 
embed and contextually deliver 
information to users while pro- 
moting productivity through the 
reuse of object-oriented compo- 
nents and libraries, he added. 

The suite was to ship at the 
end of September. Several pric- 
ing models have been provided. I 
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Court ruling protects ISVs from resale 



BY KATIE SERIGNESE 

Second-hand software cannot 
be resold, according to a feder- 
al appeals court that ruled in 
September in favor of the soft- 
ware industry and defendant 
Autodesk. 



The ruling by the 9th U.S. 
Circuit Court of Appeals over- 
turns a prior decision by a low- 
er court in favor of the plaintiff, 
Timothy Vernor. 

Vernor purchased old copies 
of Autodesk's copyrighted Auto- 



CAD design software from 
Autodesk customer Cardwell 
Thomas & Associates (CTA). 
He then sold them on eBay. 

However, the 9th Circuit 
ruled that CTA was not an own- 
er of the software because 



Autodesk licensed the software 
to them. As such, Vernor could 
not have circumvented the 
"first-sale" doctrine — a 102- 
year-old U.S. Supreme Court 
precedent that copyright hold- 
ers cannot prevent the reselling 
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of its goods after an initial 
sale — because Vernor never 
actually owned the software he 
purchased, the 9th Circuit said. 

"Autodesk retained title to 
the software and imposed sig- 
nificant transfer restrictions," 
wrote 9th Circuit Judge Con- 
suelo Callahan in a unanimous 
opinion from the three-judge 
panel. "It stated that the license 
is nontransferable, the software 
could not be transferred or 
leased without Autodesk's writ- 
ten consent, and the software 
could not be transferred out- 
side the Western Hemisphere." 

"Autodesk is pleased with 
the opinion issued by the 9th 
Circuit in which it unanimously 
affirmed the long-standing 
industry practice permitting the 
licensing of software copies to 
users," said company spokes- 
man Greg Eden. I 

SUSE toolkit 
covers cloud 
deployments 

BY KATIE SERIGNESE 

In-house development teams 
and ISVs now have access to 
more public and private clouds 
with Novell's SUSE Appliance 
Toolkit 1.1, which adds support 
for virtual and cloud deploy- 
ment formats. 

The toolkit, which features 
SUSE Studio for packaging an 
application into any virtual 
appliance form, now has addi- 
tional support for virtual 
machine formats Kernel Virtual 
Machine and Open Virtualiza- 
tion Format (a platform-agnos- 
tic format), said Michael Apple- 
baum, director of Linux and 
appliances at Novell. 

"These new cloud deploy- 
ment formats allow users to 
access a wider variety of public 
and private clouds," he added. 

Beyond that, users now have 
the ability to build appliances 
and application images for Ama- 
zon EC2 and directly deploy 
them to the Web service via the 
SUSE Appliance Toolkit. 

New data center capabilities, 
such as support for network 
booting, enable ISVs to build 
appliances to be stored in a cen- 
tral repository and booted over 
the network for remote deploy- 
ment, Applebaum said. The cen- 
trally stored and managed appli- 
ances can then be maintained 
and updated via the toolkit. I 
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MORE UPDATES 



< continued from page 8 

runtime analysis and performance profiler from SmartBear Software, 
now supports additional platforms. With Visual Studio 2010, develop- 
ers can profile managed and unmanaged code in applications without 
leaving the Microsoft IDE. Also, users can now profile applications writ- 
ten in Java as well as mixed applications . . . Ravenflow is now offer- 
ing Visio capabilities for Raven Cloud, the company's software for cre- 
ating process diagrams for a textual description of processes. Raven 
Cloud with Visio generates process diagrams from natural language 
text; automatically identifies errors, ambiguities and gaps in process; 
and generates fully functional Visio diagrams with native Visio intelli- 
gence . . . ITTIA DB SQL 3.2, an embedded relational database from 
ITTIA, introduces transaction save points and two new ways to share 
data on a device, with support for shared memory communications 
and a low-overhead storage-level locking model. With the new storage- 
locking model, any number of threads and processes can read from a 
database, but exclusive access is obtained automatically before writ- 
ing any changes . . . Rivet Software is offering a new version of its soft- 
ware for viewing extensible Business Reporting Language documents. 
Dragon View 5.0 can transfer XBRL data into Excel for review and 
comparison. Users can then filter the information to create charts and 
key ratios for internal or external analysis and distribution. It can also 
transform XBRL into an HTML "reporting book" . . . Nokia's cross-plat- 
form application and Ul framework can now use QML (Qt Meta-Object 
Language), a declarative scripting language that "describes" the inter- 
face of a program. Qt 4.7 also has performance enhancements, such 
as hardware-accelerated compositing in QtWebKit to improve anima- 
tion rendering; the new QStaticText class, which makes text render 
faster; and the new QPainter engine, which makes it possible to draw 
particle systems more efficiently in OpenGL. I 



Metrics applied to testing, quality 

MindTest assesses compliance during development 
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BY KATIE SERIGNESE 

To help development 
teams better under- 
stand the quality of 
their software and 
cut down on rework 
time, MindTree, an 
IT solutions compa- 
ny, has introduced 
MindTest. The solu- 
tion, revealed in Sep- 
tember, uses a met- 
ric-driven approach 
for testing and quality 
measurements. 

The Test Quality 
Index assesses the 

quality of testing com- Metrics shown in TestDashboard help businesses meet goals 
pliance during soft- and cut down on rework time. 
ware development. 
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Made up of two checklists (one 
to represent things done after 
development and one for 
actions taken during develop- 
ment, such as regression test- 
ing), TQI scores team members 
on particular techniques, 
explained Sylvia Veeraraghavan, 
general manager and process 
evangelist at MindTree. 



From what risks are cov- 
ered to the quality of test 
design and test cases, TQI 
offers a "qualitative way to look 
at your development," she said. 
"It's an auditing process that 
provides end-to-end gover- 
nance of a project, which can 
help determine how much 
money should go into rework 



among other deci- 
sions." 

For a quantitative 
way to measure a 
project, the Testing 
Metrics Analysis and 
Decision framework 
"looks at the whole 
picture," Veeraragha- 
van said. TMAD 
shows how all the 
metrics play together 
and what steps need 
to be taken to meet 
business goals, such 
as return on invest- 
ment, she said. 

If defect contain- 
ment effectiveness is 
a proposed metric, 
other metrics such as improved 
test-case review effectiveness 
and process compliance need to 
be taken into account, Veer- 
araghavan said. "Because if you 
look at one metric, it becomes 
misleading." 

Users can view all metrics in 
graphical reports in MindTest s 
TestDashboard. I 



Enhance your ROI on existing tools investment 



Do not rip and replace ai 



engmeersi 



Ru-quiiDment 
Management 



Design 

R5AJRSM 



I 

T 



Coding 

U 



Configuration 
Management 



A 



c 



VS-T5 Dns-Qrar J 

"I 



V3TS O^Elnpcrf 

i 



<fc 



£eprCHM ] 

5ubvarafon j 

MS-7PS j 



Bund 



± 



Unit Testing 

I 



KQ.VAIR QMNJ^US INTEGRATIONS MIDDLEWARE 

Bi-Directiorcal ALW & IT Tools Integrations 
CollaiwrallD* - Trscesbilfly . Process Aulornation i Analytic* 




-.r.fi ■> 



4 4 




CACIprily I MSP.^ttf - T 



| t*T» j 



I 



} 



Ji 






<k 



€/ 



L^irti-h- „l. Release S. Forrfolro Project yerert Te-snnq 

rKupL/EfcK Deployment ManagamoFil Manaa.eme.nl Mana^cmoni AUIOsnatan 



Qualrty tenlcr] 
ftfkl j 

IS 
Management 



Integrate 1 



Make better business decisions for Project Lifecycie with Kovair 
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rl+CAarvU® lnstant| y Search 
UI.3trcilV.ri Terabytes of Text 

♦ 25+ full-text and fielded data 
search options 

♦ Built-in file parsers and converters 
highlight hits in popular file types 

♦ Spider supports static and dynamic 
web data; highlights hits with links, 
formatting and images intact 

♦ API supports C++, -NET, Java, SQL, 
etc. .NET Spider API. Includes 64-bit 
(Win/Linux) 

♦ Fully-functional evaluations 
available 

Content extraction only 
licenses also available 

"Bottom line: dtSearch manages a 
terabyte of text in a single index and 
returns results in less than a second" 
- InfoWorld 

dtSearch "covers all data sources ... 
powerful Web-based engines" 

-eWEEK 

Lightning fast ... performance was 
unmatched by any other product" 

— Redmond Magazine 

For hundreds more reviews, and hundreds of 
developer case studies, see www.dtSearch.com 

800-IT-FINDS • www.dtSearch.com 

The Smart Choice for Text Retrieval® since 1991 
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Let us help you visualize your success 

Nevron provides the essential components for the creation of advanced digital dashboards, 
scientific and financial applications, diagrams and MMI interfaces for a variety 

of .NET centric technologies. 













Nevron components integrate seamlessly in web and desktop applications, SQL Server Reporting Services 
2005/2008 reports and SharePoint 2007/2010 portals and deliver an unmatched set of enterprise-grade 
features. That is why Nevron is the trusted vendor by many Fortune 500 companies for their most demanding 
data visualization needs. 



Developers 



IT Professionals 



Nevron .NET Vision incorporates components that help you 
create enterprise grade digital dashboards, scorecards, 
diagrams, maps, MMI interfaces and much more. 
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Nevron Reporting Services Vision instantly enhances 
your SQL Server Reporting Services 2005/2008 reports 
with the industry leading data visualization technology. 
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Chart for SSRS 
Gauge for SSRS 



Nevron SharePoint Vision instantly converts your SharePoint 
pages into advanced dashboards and reports, that unite pow- 
erful data analysis with industry leading data visualization. 
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Chart for SharePoint 
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MAKE SURE THAT YOUR DATA IS MAKING THE VISUAL STATEMENT 

IT DESERVES BY DOWNLOADING YOUR FREE EVALUATION COPY 

FROM WWW.NEVRON.COM TODAY. 



/V.NET 



AJAX 



SharePoint 2007/2™ 



SQL Server 2005/2006 



Visual Studio 



www.nevron.com | sales@nevron.com | 1888 201 6088 



Microsoft, .NET, ASP.NET, SharePoint, SQL Server and Visual Studio are registered trademarks of Microsoft Corporation in the United States and/or other countries. 
Some Nevron components only available for certain platforms. For details visit www.nevron.com or send an email to support@nevron.com. 



SharePoint Comes Back 
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SPTechCon 

The SharePoint 
Technology Conference 



Feb.7-9, 2011-* San Francisco 



Hyatt Regency Burlingame 

SPTechCon: The SharePoint 
Technology Conference is coming 
back to the San Francisco Bay Area 
from Feb. 7-9, 2011! 



Learn from the brightest minds in the 
SharePoint universe, and choose from more 
than 90 classes and workshops taught by 
the industry's best experts! 

SharePoint is taking organizations by storm! 

Jumpstart your company's migration from SharePoint 2007 
to 2010! 

You've got SharePoint 2010 up and running — now take it to the 
next level, and get new business and productivity benefits. 

The economy is tight, and SharePoint is a proven way for your 
company to become more efficient. Come to SPTechCon to get 
your competitive edge. 

One of the awesome benefits of SP2010 is its integration with 
Office 2010. Learn some proven techniques from experts working 
with it every day. 

Discover the best applications, add-ons and plug-ins for SharePoint 
in the exhibit hall! 

Learn tips and tricks that will make you your company's 
SharePoint Expert! 



Register by Friday, Nov. 12 

and SAVE $400! 
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"Awesome coverage of SharePoint. SPTechCon is a great 
place to learn and network with SharePoint Gurus." 

Devendra More, Associate Business Systems Analyst, CA Inc. 

"Great! Well-planned, the classes were great for my 

organization's needs." 

Uka Udeh, IT Specialist, DDOT 

"The conference is well worth the money and the time." 

Ken Crawley, IT Manager, Contra Costa County 

"There are good sessions here for all levels of SharePoint 
expertise— beginner to advanced." 

Brandon Kaminsky, Assistant Director Application Integration, Broward College 

"Attend! And be prepared to learn a lot." 

Mark Treacy, Software Specialist, DTS 



Follow us at twitter.com/SPTechCon 



to San Francisco! 




Choose from over 
&f\ Classes 
9U& Workshops! 

KEYNOTE: Joel Oleson 






Senior product manager 
and SharePoint evangelist 
at Quest Software 



Confirmed Speakers! 



Owen Allen 
Marc Anderson 
Chris Beckett 

(Microsoft Certified Master) 

Robert Bogue 

(MVP - SharePoint Server) 

Christian Buckley 
David Chennault 
Yaacov Cohen 
Randy Drisgill 

(MVP - SharePoint Server) 

Michael Doyle 
Shadeed Eleazer 
Chris Geier 
Ruven Gotz 
Joshua Haebets 
Scott Jamison 

(Microsoft Certified Master) 

Todd Klindt 

(MVP - SharePoint Server) 

Scott Lavoie 
Jennifer Mason 



Eamonn McGuinness 
Michael Noel 

(MVP - SharePoint Server) 

Errin O'Connor 
Joel Oleson 
Mark Rackley 
Asif Rehmani 

(MVP - SharePoint Server) 

Laura Rogers 
John Ross 

(MVP - SharePoint Server) 

Tim Smith 
Paul Swider 

(MCT) 

Dux Raymond Sy 
Geoff Varosky 

(MCP, MCTS) 

Daniel Webster 

(MCT) 

Fabian Williams 

(MCSE, MCSD, MCDBA) 

Shane Young 

(MVP - SharePoint Server) 
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CAST finds the bottom line on code quality 



< continued from page 1 

a developer and assuming each 
problem takes an hour to fix. 

An application with 374,000 
lines of code was considered 
the average in this study after 



288 IT applications from 75 
organizations (ranging from 
energy, financial, government 
and telecommunication sec- 
tors) were analyzed for struc- 
tural quality 



According to the study, struc- 
tural quality was defined as "the 
non-functional quality of the 
software application that 
describes how well the software 
is engineered from a source code 



perspective. It is also often 
referred to as the technical or 
internal quality of the software 
application." Quality was focused 
on an applications security, per- 
formance, robustness and 



Your best source for 
software development tools! 



LEADTOOLS Recognition SDK 

by LEAD Technologies 

Develop desktop and server document imaging 
and ECM applications that require high-speed 
multi-threaded forms recognition and process- 
ing, OCR, ICR, OMR, and barcode technology. 

• Supports text, OMR, image, and 
1D/2D barcode fields 

• Recognize machine print and constrained 
handwritten text 

• Auto-registration and clean-up to 
improve recognition results 

• Latin character set support is included. 
Arabic and Asian support is available 
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STOP OVERBUYING SOFTWARE TODAY! 

Eliminate Wasteful Software 
License Spend: 

• Control your software 
licensing costs 

• Stop paying for licenses 
you're not using 

• Reduce your license spend 
by $300+ per desktop user 



FREE 30-DAY 
PROOF OF CONCEPT 




Learn more: 
programmers.com/LEAD j programmers.com/eliminate-wasteful-license-spend 



VMware vSphere 
Essentials Kit Bundle 

vSphere Essentials provides an all-in-one 
solution for small offices to virtualize three 
physical servers for consolidating and 
managing applications to reduce hardware 
and operating costs with a low up-front 
investment. vSphere Essentials includes: 

• VMware ESXi and VMware ESX 
(deployment-time choice) 

• VMware vStorage VMFS 

• Four-way virtual SMP 

» VMware vCenter Server Agent 

• VMware vStorage APIs/VCB 

• VMware vCenter Update Manager 

• VMware vCenter Server for Essentials 



Certified 
for Windows 
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P35 04201A01 

$ 550." 
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"Pragma SSH for Windows'' 
Best SSH/SFTP/SCP Servers 
and Clients for Windows 

by Pragma Systems 

Get all in one easy to use high performance 
package. FIPS Certified and Certified for Windows. 
•Certified for Windows Server 2008R2 

• Compatible with Windows 7 

• High-performance servers with 
centralized management 

• Active Directory & GSSAPI authentication 

• Supports over 1 000 sessions 

• Hyper-V and PowerShell support 

• Runs in Windows 2008R2/2008/2003/ 
7/Vista/XP/2000 

programmers.com/pragma 

ActiveReports 6 

by GrapeCity 

Integrate Business Intelligence/Reporting/Data 
Analysis into your .NET applications using the 
NEW ActiveReports 6. 

• Fast and Flexible reporting engine 

• Data Visualization and Layout Controls such 
as Chart, Barcode and Table Cross Section 
Controls 

• Wide range of Export and Preview formats 
including Windows Forms Viewer, Web 
Viewer, Adobe Flash and PDF 

• Royalty-Free Licensing for Web and 
Windows applications 

programmers.com/grapecity 



InstallShield Professional 
for Windows 2011 

by Flexera Software 

If your software targets Windows®, 
InstallShield® is your solution. It makes it 
easy to author high-quality reliable Windows 
Installer (MSI) and InstallScript installations 
and App-V™ virtual packages for Windows 
platforms, including Windows 7. InstallShield, 
the industry standard for MSI installations, 
also supports the latest Microsoft technologies 
including Visual Studio 2010, .NET 
Framework 4.0, IIS7.0, SQL Server 2008 
SP1, and Windows Server 2008 R2 and 
Windows Installer 5, keeping your customers 
happy and your support costs down. 
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InstallShield" 



Upg from any 

Active IS Pro + 

IS Pro Silver Mtn 

Paradise # 

I21H02401B01 

$ 1,384." 

programmers.com/flexera 



Microsoft Visual Studio 
Professional 2010 

by Microsoft 

I Microsoft Visual Studio 2010 Professional with 

I MSDN Essentials Subscription is an integrated 

I environment that simplifies creating, debugging 

: and deploying applications. Unleash your creativity 

; and bring your vision to life with powerful design 

; surfaces and innovative collaboration methods for 

I developers and designers. Work within a personal- 

; ized environment, targeting a growing number of 

I platforms, including Microsoft SharePoint and cloud 

| applications and accelerate the coding process by 

I using your existing skills. Integrated support for 

; Test-First Development and new debugging tools 

| let you find and fix bugs quickly and easily to 



| ensure high quality solutions. 



with MSDN 

Paradise # 

M47 40201A02 

$ 1,060." 

programmers.com/microsoft I 



FREE WEBINAR SERIES: MAXIMIZING DATA QUALITY FOR VALUE AND ROI 

Data is a company's greatest asset. Enterprises that can harness the power of their data will be strategically posi- 
tioned for the next business evolution. But too often businesses get bogged down in defining a Data Management 
process, awaiting some "magic bullet", while the scope of their task grows larger and their data quality erodes. 
Regardless of how your eventual data management solution is implemented, there are processes that need to 
occur now to facilitate that process. In this new series, with a mixture of slides, demonstrations and Q&A sessions, 
we will discuss how to use your existing Data Modeling assets to build the foundations of strong data quality. 

REGISTER TODAY! programmers.com/CA 



CA ERwin® Data Modeler r7.3 - Product Plus 1 Year Enterprise Maintenance 

CA ERwin Data Modeler is a data modeling solution that enables you to create and maintain 
databases, data warehouses and enterprise data resource models. These models help you 
visualize data structures so that you can effectively organize, manage and moderate data 
complexities, database technologies and the deployment environment. 
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BUILD ON 
VMWARE ESXi 
AND VSPHERE 

for Centralized Management, 
Continuous Application 
Availability, and Maximum 
Operational Efficiency in Your 
Virtualized Datacenter. 

Programmer's Paradise invites you to take advantage 
of this webinar series sponsored by our TechXtend 
solutions division. 

FREE VIRTUALIZATION WEBINAR SERIES: 
REGISTER TODAY! TechXtend.com/Webinars 



TX Text Control 15.1 

Word Processing Components 

TX Text Control is royalty-free, 
robust and powerful word processing 
software in reusable component form. 

•. NET WinForms control for VB.NET and C# 

• ActiveX for VB6, Delphi, VBScript/HTML, ASP 

• File formats DOCX, DOC, RTF, HTML, XML, TXT 

• PDF and PDF/A export, PDF text import 

• Tables, headers & footers, text frames, 
bullets, structured numbered lists, multiple 
undo/redo, sections, merge fields, columns 

• Ready-to-use toolbars and dialog boxes 
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T79 02101A02 

$ 1,220." 
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NEW! Intel® 
Parallel Studio 2011 

by Intel 

A comprehensive, all-in-one toolkit 
for Microsoft Visual Studio® C/C++ 
developers, Intel® Parallel Studio 
2011 simplifies the analysis, 
compiling, debugging, error-checking, 
and tuning of your serial and 
threaded apps. 

With Intel Parallel Studio, get 
everything you need to optimize 
legacy serial code, exploit multicore, 
and scale for manycore. 



Paratie 



Single User DVD 

Paradise # 

123 63101E03 

$ 753." 

programmers.com/intel 
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changeability characteristics. 

Aside from concluding an 
average applications "technical 
debt," the study delved into the 
"quality" of programming lan- 
guages, namely C/C++, 
COBOL, Java, .NET and Oracle 
4GL. COBOL, due to its age and 
use mainly in mainframes in reg- 
ulated environments, was the 
most secure, said Bill Curtis, 
CAST's chief scientist and senior 
vice president of the CAST Cen- 
ter for Quantitative Research. 

Financial and insurance sec- 
tors scored well in this category 
due to their heavy reliance on 
mainframe applications, which 
reduce exposure to security 
problems seen in a lot of Web 
applications, he added. 

JAVA EEAND.NET PROBLEMS 

.NET applications received 
some of the lowest security 
scores, suggesting that the IT 
community's attention to secu- 
rity may be primarily driven by 
compliance regulations, which 
are not as intensive as regula- 
tions for COBOL. 

After looking at things in the 
structure that are known to 
affect performance while data 
grows (such as incorrect index- 
ing), Curtis said, Java EE appli- 
cations performed most poorly, 
with .NET applications almost as 
poor. The performance of appli- 
cations written in other lan- 
guages skewed more positively. 

CAST hypothesizes that the 
cause of this trend is the avail- 
ability and use of automated 
performance testing tools and 
end users complaining to devel- 
opment teams about slow per- 
formance, making the remedia- 
tion of performance a priority 
over other quality problems. 

Deeper analysis of the data 
revealed that newer, Web-fac- 
ing technologies, such as Java 
EE and .NET, also scored low- 
er in performance and robust- 
ness, which are defined as 
"attributes that affect the stabil- 
ity of an application and likeli- 
hood of introducing defects 
when modifying it." 

Changeability, or the ease in 
which an application can be 
modified, was lowest in the gov- 
ernment sectors. Curtis attrib- 
utes this to how the govern- 
ment acquires applications. 

"Multiple contractors work- 
ing on an application over time, 
disincentives in contracts for 
building easily maintainable 
code, and challenging acquisi- 
tion practices are potential 
explanations," the study said. 
continued on page 23 ► 
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Fraud detection a new area for devs 



< continued from page 1 

available for mobile apps: 

The first, mobile device 
identification, is server-based 
JavaScript. The script captures 
information about a user's 
browser and phone when he or 
she logs in. If the app is brows- 
er-based, the script captures 
unique browser identification 
information and data to identify 
the phone. If the app is native 
on the device, it can also gather 
the phone s serial number and 
network card number to for- 
ward to the e-commerce entity. 
The second method uses 
the phone's location, and only 
requires that the device be 
turned on. Using location 
information can help specifi- 
cally authenticate the user 

CODE QUALITY 

< continued from page 22 

The government also out- 
sources 75% of its applications, 
compared to 50% in the private 
sector, the report said. 

CAST theorized before the 
study that the size of any applica- 
tion would affect its quality. But 
this was not necessarily true, 
Curtis said. Except for main- 
frame applications written in 
COBOL, which do not encour- 
age modularity and have more 
large and complex components, 
there is no impact, he added. 

The more intertwined com- 
ponents are, the more difficult it 
is to change or modify an appli- 
cation. In contrast to COBOL 
applications, "the designs of 
more recent languages encour- 
age modularity and other tech- 
niques that control the amount 
of complexity as applications 
grow larger," the study said. 

So what do these findings 
mean? Performance and secu- 
rity are at the forefronts of 
most developers' minds. Less 
attention is paid to reducing 
changeability problems, creat- 
ing an increase in the cost of 
ownership in the long run, the 
study said. 

These findings also suggest 
that "the developer community 
is very reactive and not proac- 
tive," Curtis said. Especially in 
agile environments, time needs 
to be built in for remediation 
and refactoring, he added. "If 
you don't do something about it 
now and continue to write 
code, you're going to continue 
to build technical debt." I 



through correlation with other 
systems such as a user's 
address in a directory. Mobile 
phones can forward location 
information based on GPS 
data, but it also requires the 
user to opt-in. 



The third strategy is to cus- 
tomize the company's risk scor- 
ing and rule-based models for 
mobile applications. This 
approach, which Gartner said 
some online fraud detection 
vendors are beginning to imple- 



ment, looks at the device itself, 
its location and the usage pat- 
terns of an app on the phone. 
Right now, there's a dearth of 
experience to draw upon, which 
makes it difficult to build 
resilient risk models. 



According to Avivah Litan, 
vice president at Gartner, "Given 
the explosive growth of smart- 
phones and other mobile 
devices, the increase in mobile 
commerce, and the migration of 
fraud attacks to these devices, 
using mobile fraud detection in 
mobile commerce environments 
is an imperative." I 
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Application Transformation 

Syncfusion controls enable you to implement your applications 
faster using our field-tested building blocks, incorporate a rich 
ill experience, and scale to any performance requirement while 
handling requirement changes gracefully. 



Just released - Essential Studio 2010 Volume 3: 

• Powerful Silverlight 4 controls 

• Complete set of ASRNET MVC components 

• Cutting edge Business Intelligence components 
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Companies that modernized with 
Simpana® software cut data 
management costs by up to 




CommVault Simpana software delivers 
the following capabilities for managing 
Microsoft SharePoint data: 

■ Rapid SharePoint backup including 
"near instant" snapshot capabilities 

■ Easy browse and restore individual 
SharePoint sites and entire 
databases and systems 

■ Deduplication of SharePoint 
managed data on both disk 
and tape storage 

■ Simultaneous management 
of SharePoint and other 
Microsoft applications 

■ Easy migration of SharePoint 
documents among SharePoint 
versions 

Learn more at commvault.com 
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® 
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Backup & Recovery 

Deduplication 

Virtualization 

eDiscovery 

Archive 
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Oracle scales back plans for JDK 7 



< continued from page 1 

to Mark Reinhold, Oracles lead 
developer for JDK 7. 

Project Jigsaw is an effort to 
make Java more modular, while 
Project Lambda aims to bring 
closures to Java, and Project 
Coin is an effort to make small 
changes to Java's behavior and 
syntax. All three projects are 
underway, but Reinhold intimat- 
ed on his blog that including 
them in JDK 7 would push the 
release of that project back until 
2012. 

While JDK 7 is moving 
toward completion in the mid- 
dle of next year, a JSR will be 
constructed alongside it and 
passed through the JCP at the 
same time. Reinhold wrote on 
his blog that the JCP will 
approve a specification for JDK 
7 at the same time as the 
release of the final version of 
the platform; this is the tradi- 
tional way new versions of Java 
have been advanced. 

For the past year, the JCP 
has remained stagnant. Even 
Rod Johnson, a member of the 
JCP executive committee, has 



PROPOSED JDK 7 FEATURES 


• JSR 292: Support for dynamically 


• NI0.2 filesystem provider for 


typed languages (InvokeDynamic) 


zip/jar archives 


• JSR TBD: Small language 


• SCTP (Stream Control 


enhancements (Some parts of 


Transmission Protocol) 


Project Coin) 


• SDP (Sockets Direct Protocol) 


• Upgraded class-loader 


• Compatibility with the Windows 


architecture 


Vista IPv6 stack 


• Method to close a URLCIassLoader 


• TLS 1.2 


• Concurrency and collections 


• Elliptic-curve cryptography (ECC) 


updates 


• JDBC 4.1 


• Unicode 6.0 


• XRender pipeline for Java 2D 


• Locale enhancement 


• Creation of a new platform APIs 


• Separate user locale and user- 


for 6u10 graphics features 


interface locale 


• Nimbus look-and-feel for Swing 


• JSR 203: More new I/O APIs for 


• Swing JLayer component 


the Java platform (NI0.2) 


• Update to the XML stack 



hinted that the body might be 
dying. But while Oracle has 
been quiet on the topic of the 
JCP until now, the announce- 
ment that JDK 7 would have an 
umbrella JSR issued and 
worked through the JCP indi- 
cates that Oracle intends to 
keep the community body alive. 
Elsewhere in the Java plat- 
form, JavaFX made a return to 



the spotlight as the new founda- 
tion for a Web-focused stack 
and deployment model from 
Oracle. Kurian explained that 
JavaFX would act as the inte- 
gration layer for HTML 5, Java 
and JavaScript. 

Key to this client- side push 
in Java is the addition of a new 
2D and 3D graphics engine for 
JDK 7. Codenamed Prism, the 



graphics engine will provide 
3D-accelerator support within 
Java through DirectX and 
OpenGL. Additionally, the new 
engine will be bolstered by new 
AWT and Swing user-interface 
creation routines in JavaFX. 

Finally, the entire client- side 
stack will be built and deployed 
in a standard and unified man- 
ner, all of which will take place 
inside of NetBeans. That IDE 
will see two new releases within 
the next year, said Kurian. 

He added that JavaFX will 
bridge the gap between Java 
applications and the browsers 
DOM, where HTML 5 and 
JavaScript exist. "We're going to 
give you a single programming 
model based on JavaFX that 
spans both domains," he said. 

"From a programming model 
point of view, we're going to give 
you APIs for visual design with 
declarative development and a 
standard set of UI controls. We'll 
also add support for data binding 
to REST or JSON and various 
kinds of back-end sources." 

Kurian went on to discuss the 
future of Java EE, but he did not 



describe any new features or 
plans for that platform. Instead, 
he stated that Oracle will contin- 
ue to improve the interoperabili- 
ty, performance and modularity 
of Java EE. He then described 
the additions to the platform that 
have taken place this year. 

Java ME is receiving, per- 
haps, the most drastic changes 
currently planned for Java. 
Kurian explained that Java ME 
will now focus on lower-end 
mobile devices, such as flip 
phones and so-called feature 
phones. Because these devices 
lack standardized Web 
browsers, Java ME will now 
contain elements of the open- 
source Web browser used by 
Apple, Google, Research In 
Motion and Web Kit. 

Using these components, 
said Kurian, developers will be 
able to distill Web experiences 
into order lists suitable for dis- 
play on the tiny, low-resolution 
screens of non-smartphones. 
Java ME will also add a new 2D 
and 3D rendering engine to 
encourage game development 
on these platforms, he said. I 



JavaOne gets mixed reaction from attendees 



BY ALEX HANDY 

JavaOne seemed to be near 
extinction last year, but Oracle's 
acquisition of Sun revived it. We 
talked with some notable atten- 
dees to see how the conference 
went. 

Mike Milinkovich, director of the 
Eclipse Foundation: 

The good news from JavaOne 
is that Oracle has a clear vision 
on where they want to take 
Java over the next couple of 
years, and I believe that they 
are putting the resources and 
leadership in place to actually 
execute on their plan. It will 
be refreshing to the point of 
relief if the Java platform team 
can execute on delivering reg- 
ular and innovative Java 
releases. 

I am concerned, however, 
over the lack of clarity on the 
future of the JCP and the 
involvement of the Java ecosys- 
tem in its governance. Oracle 
has a well-deserved reputation 
as a fierce competitor in the 
marketplace. Can they success- 
fully lead an inclusive commu- 
nity? Java needs Oracle to be a 



better steward than Sun was 
over the past couple of years. 

Laxmi Poruri, partner at Primary 
Global Research: 

There were rumors that Mark 
Hurd was going to take over the 
Sun business. That makes sense 
because he's an HP guy. 

I've heard differing views 
about the Oracle middleware. 
The Oracle people are touting 
it, but some users are likely to 
call it con-Fusion. I'm hearing 
that it's doing well, and that 
Oracle is positioning it to 
encroach a little on SAP and 
take away some interest in 
NetWeaver. 

I know Fusion apps got 
good reviews from the beta 
testers. I think the big question 
is implementation costs. It's a 
significant upgrade, so the cost 
associated with that is going to 
be two to three times what an 
upgrade would cost, and I think 
in this kind of economy that 
would be scrutinized a little 
more. I've heard good things 
about the technology, but 
there's skepticism on uptake 
because of the cost. 



Al Hilwa, program director for 
application development software 
for IDC: 

I was at JavaOne last year. Real- 
ly, it seemed like it was a dying 
conference before, and last year 
it was dying. It was moribund to 
me, very somber. 

But this year, notwithstand- 
ing how many attendees there 
were, at least the energy level 
was high and people were 
excited. It wasn't ideal, but it's 
doable. Sometimes there are 
conferences in New Orleans 
where you can walk the same 
distances across town at 
Oracle entirely in the conven- 
tion hall. 

I think the energy level is 
good. I think they succeeded in 
showing that Java is here to 
stay and it's being invested in. 
It's got a road map, and they're 
going to aggressively tackle 
things. They're not going to kill 
NetBeans, they're not going to 
kill HotSpot. They got that 
message across, and I think 
that was a comfort for the com- 
munity to hear. 

There are some great inno- 
vations in all of the Java tech- 





'Oracle has a well-deserved repu- 
tation as a fierce competitor. 
Can they successfully lead an 
inclusive community?' 

—Mike Milinkovich 



'The Oracle people are touting 
[Oracle middleware], but some 
users are likely to call it 
con-Fusion.' 

—Laxmi Poruri 
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'They succeeded in showing that 
Java is here to stay and it's 
being invested in.' 

-Al Hilwa 



nologies that were acquired. 
While I completely get that 
you have to rein in the prolif- 
eration of projects, there was 
probably too much spending 



going on at Sun, so I respect 
the fact that Oracle is trying to 
control some of those costs 
and that they're valuable to 
the community. I 
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It's tough to be agile with a manual build and 
test system and slow cycle times. 

Learn how a fast, automated build and test cycle powered by 
Electric Cloud solutions can become the heartbeat of an agile 
development project— and free developers to focus on what 
they do best: producing great software. 

Find out how leading companies have improved their 
agility at www.electric-cloud.com/agile 
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Quick feedback and better testing are 

benefits that waterfall and 

hybrid shops 




- ontinuous integration has 
| become a staple in many orga- 
nizations because it allows 
software teams to improve 
product quality, save time, 
lower the number of failed deployments 
and reduce rework costs. Despite the 
benefits of faster code iteration, not all 
software teams have embraced the 
practice. 

According to Tom Grant, a senior 
analyst at Forrester Research, approxi- 
mately two-thirds of software teams 
claim to have adopted continuous inte- 
gration, while the remaining one-third 
has not. 

"It's hard to do continuous integra- 
tion," he said. "Although it provides 
immediate benefits, it requires a [seri- 
ous] commitment." 

One reason so many organizations 
have adopted continuous integration is 
to avoid unnecessary rework. 

"If you're integrating a week or two's 
worth of changes and trying to retrofit or 
retrofix the backlog, [you're wasting 
time]," said Mike Rozlog, senior director 
of Delphi Solutions at Embarcadero 
Technologies. 

"If you're constantly updating, you 
have a huge advantage from product 
quality and rework standpoints. The 
longer you hold onto code, the more 
rework you're going to have to do. You 
want to know that your code is okay and 
won't break someone else's." 

All organizations can benefit from 
continuous integration whether they are 
agile, non-agile or some sort of hybrid, 
because it allows developers to isolate 
and fix errors faster and cleaner, with 




less overhead. 

"Continuous 
integration is the 
ultimate safety 
net," said Chris 
Clarke, VP of prod- 
uct management at 
CollabNet. "Because 
teams are getting lean- 
er and meaner, there 
are [fewer] QA guys, so 
developers need more 
feedback. In the past, you 
could spend months 
putting the guts back into 
your code. Now, in minutes 
or hours, you know if your 
changes will negatively impact 
the software you're integrating 
with, and you can be more con- 
fident about your code." 

For agile teams, continuous 
integration can help increase 
code output, improve product 
quality and reinforce disciplined 
software practices. 

"Continuous integration is a core 
piece of agile," said Thomas Mur- 
phy, a research director at Gartner. 
"There are rules for check-in and 
what needs to happen in testing 
before check-in." 

If organizations want to advance 
to "true" agile (as few organizations 
are purely agile), continuous integra- 
tion is a must because it is important 
to know as soon as possible whether 
code is good or bad, said Rozlog. 

In non-agile organizations, con- 
tinuous integration forces teams to 
make a greater investment in builds 



can use 



BY LISA MORGAN 




^WM1»U)|^ 



* 



and test- 
ing. Accord- 
ing to Grant, 
team dynamics 
tend to improve 
as a result of con- 
tinuous integration, 
especially in organi- 
zations with waterfall 
practices, because the 
entire team is commit- 
ted to changing what 
happens early in the soft- 
ware development life 
cycle. 
Usman Muzaffar, VP of 
product management at Elec- 
tric Cloud, considers continu- 
ous integration as useful for 
waterfall practices as it is for 
agile practices because of the vis- 
ibility it provides. 

"There are good reasons why 
continuous cycles are longer [in 
organizations with waterfall prac- 
tices]," he said. "Even if you're 
moving from months to weeks or 
longer, you can still get the benefit. 
Until you can see your code playing 
nicely with others, you're flying 
blind." 

For hybrid organizations, the 
most common question is which of 
the many application life-cycle man- 
agement disciplines should be 
adopted. If they do nothing else, 
said Grant, they should adopt con- 
tinuous integration, because it is a 
discipline that tests mettle by 
requiring everyone on the team to 
continued on page 31 ► 



BEST PRACTICE 
RECOMMENDATIONS 



Set team expectations. Because night- 
ly builds require constant consumption 
of and contribution to code, developers 
need to get used to smaller, faster, more 
iterative cycles. Early on, you will likely 
notice code-quality improvements. Lat- 
er, you will likely discover that product 
quality and processes are becoming 
more predictable and that you can use 
metrics to further optimize them. 

Get into a rhythm. "Continuous" can 
mean literally continuous, nightly builds, 
weekly builds, other periodic builds, or a 
combination of builds. Regular, disci- 
plined practices help ensure product 
and process consistency. Without disci- 
pline, expect continuous breakage. Also, 
make sure your test cases are priori- 
tized so the build can run within the 
confines of its cycle frequency. 

Run builds as frequently as possible. 
That way, developers can get access 
to the most recent version of code and 
reduce the amount of rework. You can 
help speed things up by automating 
the build process. 

Have an infrastructure in place. 
Continuous integration is best 
achieved using automated tools, build 
servers (vs. developers' desktops), and 
other infrastructural elements that 
can help facilitate its success. 

Try preflight builds. One common 
gripe about continuous integration is 
that it is post facto. Some tools allow 
you to test the effect of changes prior 
before you officially commit. (This is 
particularly useful for branched code.) 




So What Do We Do About the 
SharePoint Adoption Gap? 
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succeed often, if not every day. 

Regardless of where an 
organization is on the agile con- 
tinuum, one of the major bene- 
fits of continuous integration is 
feedback. Without continuous 
integration, developers sense 
they're making progress but 
often fear the rework that will 
be required days, weeks, or 
months later when they finally 
discover how misaligned their 
changes are, said Muzaffar. 

Central to the notion of 
"continuous" is automation 
because it saves time, speeds 
processes and lowers costs. 
Maciej Zawadzki, president 
and founder of Urbancode, 
said that although it is possible 
to automate using a Perl script, 
to truly realize the benefits of 
automation, software teams 
need two additional things: vis- 
ibility, so they can identify 
problems and fix them; and a 
self-service aspect, so they can 
run scripts themselves even if 
they are unable to see someone 
else's code. 

"It's not a question of failure 
because failures are going to 
happen," he said. "The more 
transparent failure is, the easier 
it is to diagnose what failed." 

Continuous integration is a 
discipline first and foremost, 
which means software teams 
need to commit to a common 
set of practices, such as smaller 
and more rapid code iterations, 
and regular, frequent builds. 

"The team has to invest in 
doing something that's different 
up front," said Grant. "There's 
always someone that says his or 
her work can't be broken down 
for some reason, like there're 
too many dependencies. If you 
want the team to move in the 
same direction, you need to 
make a common investment in 
the outcome." 

Zawadzki agrees, adding 
that some fear the feedback 
they're going to get when builds 
break, either because it will 
imply the codebase is unstable, 
or that the developer really isn't 
as good as everyone assumed he 
or she was. 

Some teams are concerned 
that if everyone is focused too 
heavily on a single thing, like 
build scripts, then the team's 
overall performance will suffer. 
However, an even larger barrier 
is a cultural one. 

"Continuous integration 



requires a change in developer There are also concerns 

behavior," said Gartner's Mur- about initial capital and operat- 

phy "In some cases, the prob- ing expenses. On one hand, 

lem is inertia because people there is the cost of tools and 

are doing what they're comfort- hardware, and on the other 

able with." hand, there is the cost of alter- 



ing developer behavior. 

"Setup and maintenance is 
a huge issue," said Embar- 
cadero's Rozlog. "You have to 
consider structure, architec- 
ture and personal biases, and 



then decide whether the over- 
head is worth the supposed 
benefit." 

Zawadzki said some of his 

customers have taken continu- 

continued on page 33 ► 



HOW HERtTHY IS YOUR CODE/ 

You're a hard-working developer; coding is your life, and the life's blood of your 
IT organization. The success of your company depends on working code for 
business -criticaf operations, Continuous integration can help by automatically 
creating and assigning issues based on build results, sending alerts, and 
updating file releases. You can focus on developing functional, quality code, 
and maintaining team momentum. 



CofiabNet Team Forge works with Hudson to offer continuous integration 
real-time build and test. See how it can help you keep your code in working 
order at www.coliab.net/dontbreakthebtjild. 






. 



f 









* teyf Re* 

P H? 




ounces 




tiy j 



>; 






^ 









I N F0QCOLLAE.NET WWW.COLLAB.NET 8000 MARINA BLVD BRISBANE. C A 94005 USA 



COLLABNET 



33 



Sim i VaHey 



<•> 




Monn 



Aaai.m Ufll* 



/2\ 



AiuEa ndora 



ArcGIS® Mapping for SharePoint 

Change the Way You Look at Your Data in SharePoint 



h fti' 



© a ^r:. 







f. t B .fa* 



art" -.-^ck?* t u:i-t3.:j ■:- •im? -j u 



■ ■■■ - •- * 



■■ ■ ....... 



Configure your maps with simple-to-use dialog boxes. 

ArcGIS® Mapping for SharePoint® provides an out-of-the-box mapping 
solution that gives you a geospatial view of your organization's data. 
The ability to view and interact with data in SharePoint offers insights 
and advantages not available from tabular data alone. 

No programming is necessary. Apply your SharePoint skills to quickly 
and easily create and display SharePoint-accessible information on a 
map that can be shared with everyone. 
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ous integration to an extreme, 
because they're operating at 
such a fast pace, it is worth the 
cost of dedicating 100 machines 
to run builds and tests if it alle- 
viates the cost of a bad, buggy 
commit. 

In complex environments, 
among teams managing lots of 
branches, or in organizations 
that have moved beyond night- 
ly builds to truly continuous 
builds, continuous integration 
can become a "box hog," 
according to Collab Net's Clarke 
and Mike McGarr, a senior con- 
sultant at Excella Consulting. 
Solutions to the problem 
include notifying the group 
affected in advance of a build, 
dedicating machines to builds, 
or taking advantage of the 
cloud. 

NIGHTLY BUILDS ARE A START 

Not all organizations that have 
adopted continuous integra- 
tion are doing nightly builds, 
and even those that are doing 
nightly builds may also be 
doing more frequent builds to 
keep the codebase as up to 
date as possible. Setting night- 
ly builds as a goal is an impor- 
tant step because it requires 
discipline and helps reduce 
rework. 

"A lot of us started out with 
nightly builds because it's easy 
to get started and it forces you 
to get into good work rhythms," 
said Clarke. "When your orga- 
nization matures, you can move 
to a commit-by-commit basis." 

One Urbancode customer 
moved from nightly builds to 
four builds per day so teams in 
different regions could see the 
results. Other organizations 
have taken advantage of nightly 
cycles to run automated tests, 
do static analysis, and execute 
security scans in addition to 
builds. 

Nightly builds can help 
ensure any misalignments are 
less severe than they would have 
been had the builds been run 
less frequently. Moving to night- 
ly builds can also help teams 
become more disciplined. 

"Nightly builds are fairly 
well adopted. If your organiza- 
tion is agile, you're striving 
toward more frequent itera- 
tions, so you want to get your 
organization into a daily 
rhythm," said Gartner's Mur- 
phy. "You may also decide to 



have a peer review once a day. 
Continuous integration means 
varying things that go on with 
builds. If you can get into a reg- 
ular rhythm, you can be more 
consistent." 



Nightly builds and builds 
that occur more or less fre- 
quently are not necessarily 
mutually exclusive. Some 
organizations are initiating 
builds every time code is 



checked in, and they are also 
doing nightly builds. Nightly 
builds are also being com- 
bined with less-frequent 
builds that may involve more 
in-depth testing. 



How often builds occur may 
depend on the length of the 
build cycle; if the build takes 
more than 24 hours, then night- 
ly builds are impractical as 
structured. I 
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FROM THE EDITORS 

Fresh Java 

Say what you will about Oracle and this years JavaOne conference, 
there's no denying that Java developers the world over breathed a 
heavy sigh of relief during the show. After months of keeping mum on 
the topic, the company finally took time out of its busy schedule to let 
us all know it would not be eviscerating Java. After months of rumors 
and fear, it turns out that the only major Sun project Oracle plans to 
kill is OpenSolaris. 

That may not seem like big news, but frankly, it is. When Oracle 
acquired Sun, it also acquired a large amount of redundant Java pro- 
jects, from NetBeans to HotSpot to a large assortment of frameworks 
and database connectors. It was to be expected that some of these 
would be thrown overboard. But it would appear that Oracle is not 
planning on dumping any of the Java projects it acquired. The Open 
JDK will continue on the same path it's been on, NetBeans will be a 
huge part of Oracle's JavaFX plans, and the Java Community Process 
isn't going away anytime soon. It was a comforting message to receive 
from a company that has, historically, not been known for its open 
platforms. 

Make no mistake, however: There remain deep underlying prob- 
lems with Oracle's stewardship. It has been reported that, at 
JavaOne, the JCP board voted for Oracle to spin the JCP off as an 
independent overseer of Java. This was a move Oracle had called for 
a few years ago when Sun was in control of the evolution of Java. 
Also, reports show that the JCP is uncomfortable with Oracle's law- 
suit against Google over Java patents. 

For now, at least, Oracle has taken a good first step by finally 
revealing some of its thoughts for the future of Java. While we are still 
a bit unclear on a few edges of the Java platform, the broader picture 
of what JDK 7 will be is now nice and clear for all to see. That should 
help to keep Java developers happy and stress-free, for at least a little 
while longer. 

A new playbook for RIM 

When RIM unveiled its new PlayBook tablet at the BlackBerry 
DevCon in San Francisco, many in the audience immediately 
saw it as a competitor to Apple's iPad. And this is very likely the case. 

But it seems somehow strange to us to think that this device is 
strictly for consumers. RIM has made its entire business out of cater- 
ing to enterprises and "serious" users. Sure, consumers use Black- 
Berry devices, too, but that subsection of the population has been 
dwindling ever since the iPhone shipped, and as of the first of Octo- 
ber, Android is in first place for new phone sales. 

RIM isn't about consumer devices; it's about getting work done 
remotely. The company lives, eats and breathes government contracts 
and enterprise infrastructure. If it is now suddenly deciding to focus 
on the consumer market with a device that is, essentially, an expen- 
sive toy, there could be trouble. 

Now we're not saying that the iPad is a toy. What we're saying is 
that no one who owns an iPad spent their grocery money on the thing: 
It is, essentially, a luxury item. 

So, if RIM wants to play in the luxury item space, more power to 
it. But we feel it'd be much better off focusing on what it does best: 
making businesspeople unable to avoid work, no matter where they 
are in the world. Banking on consumers buying its tablet, when 
Apple already has a one-year, 50,000-app head start, is tantamount to 
shouting "Charge," then rushing your troops straight into machine- 
gun fire. I 



Customer confidence 
hinges on agile schedules 



I recently co-authored an industry 
report for marketing managers that 
probably won't appeal to you unless 
you're managing paid search-marketing 
campaigns. But since you're spending 
most of your time creating software, you 
may be interested to know that 
even marketing people can tell 
the difference between soft- 
ware companies that have 
adopted agile development 
practices and those that 
haven't. 

The report, entitled "The 
2010 PPC Management and 
Optimization Report," was 
produced by PPC Summit. It 
is really a buyer's guide, but it 
also has a lot of analysis and identifies a 
number of trends about pay-per-click 
marketing. One of the things that 
struck me as the principal analyst was 
how obvious agile development prac- 
tices are becoming to the average busi- 
ness consumer. 

Most of these non-technical 
observers talk about agile development 
in terms of its effect. They're noticing 
that some platform providers are rolling 
out releases every two weeks while oth- 
ers are rolling out releases maybe once 
or twice per year. The paid search plat- 
form providers who have adopted agile 
development practices are seen as more 
in tune with customer requirements and 
also more in tune with Google's constant 
modifications to its algorithms. 

The difference in release schedules is 
affecting software provider preferences 
and, ultimately, sales. 

Agile development is also affecting 
customer loyalty No one wants to be 
aligned with a dinosaur, particularly 
when the part of the industry you're 
working in is moving at light speed. 

Customer loyalty also plays out in 
terms of customer requirements. Since 
the dawn of software, users have always 
had something to say about how it could 
be improved. The difference is, more 
agile tools and platforms are allowing 
companies to more easily adopt and pri- 
oritize customer requests if not trans- 
form them into stories. 

Some of the marketers interviewed 
for the report were flattered and im- 
pressed that their platform vendors were 
actively listening to them, and even 
more impressed when the vendor had 
morphed one or more of their requests 
into product features. For the less ego- 
tistical, the new features were the sign of 
a good and dedicated business partner. 
For the narcissists, it was like a Windows 
7 commercial. "I'm a PPC (marketing 
manager) and I invented [my favorite 
platform vendor]." 




The companies getting the most 
praise were mostly the new companies 
with considerable venture funding. 
That's not an absolute, though. There 
was one privately funded company 
whose CEO had been named by at 
least half of his customers 
for responding to some 
requests late at night, even 
though he has a decent- 
sized staff. He's actively 
soliciting input, as are some 
of the venture-funded com- 
panies, and this CEO is off- 
shoring like crazy to remain 
competitive. Customer hap- 
piness is his goal, and who 
knows what the market 
wants better than customers? 

Finally, agile development prac- 
tices are being viewed as a form of 
customer support, particularly as it 
relates to product features. Customers 
are asking for things, and vendors are 
delivering. It's like asking where a 
package is and getting a quick answer. 
Of all the things vendors are judged 
on, support rates No. 1. The human 
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In the eyes of customers, reliable support is 
the most critical aspect of software. 

element above all things shapes the 
lifetime value of customer relation- 
ships, at least among the people inter- 
viewed for the report. Features are 
nice, price is nice, but in the end, if 
you don't have a partner you can rely 
on, the rest doesn't matter all that 
much. 

In my mind, it's definitely a sign of 
the times when once-esoteric software 
disciplines become something your kid 
sister might notice. It's called market 
maturity. Sure, market maturity is the- 
oretically predictable, but still, it's fas- 
cinating to watch how trends actually 
unfold in different industries. Like the 
butterfly effect, a developer taps his 
keyboard, and on the other side of the 
world, a customer smiles, knowing her 
idea has been commemorated in soft- 
ware. I 

Lisa Morgan is a contributing writer to 
SD Times, and is also the founder of 
Strategic Rainmakers, a marketing con- 
sulting company. 
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USING THE WORDS "INCREASE," 

"socialize" and "manage" will get your 
social media words re-tweeted the most 
on Twitter, according to new analysis 
posted on the SmartData Collective blog. 

Text Mining analyzed 3,000 social 
media title posts in order to determine the 
most read and written-about topics, wrote 
the blog s author, Greek data mining con- 
sultant Themos Kalafatis. Phrases includ- 
ing the words "write," "talk" and "trust" 
were re-tweeted less frequently, he said. 

Kalafatis described this analysis as 
"one more example on how predictive 
analytics may help professionals make 
better decisions." So, the next time you 
tweet about an application you built or a 
blog you wrote, use those words. It may 
manage get someone's attention while 
they socialize on Twitter and increase 
your chances of being re-tweeted! 

— Katie Serignese 

BUSINESS INTELLIGENCE IS GREAT 

at helping organizations see what hap- 
pened in the past and what's happening 
now. But to guess what will happen in 
the future requires something called 
"predictive business intelligence." 

Rado Kotorov, chief innovation officer 
at Information Builders, described this as 
the use of technology to form better 
expectations about the future. Reporting 
and analytics enable you to take corrective 
action from the past. In a hospital, it 
might show an over-prescription of a cer- 
tain drug, so administrators might set a 
new policy for its use going forward. 

Complex event processing helps 
understand what's happening now. For 
instance, that same hospital might use 
this to set a policy that states, "Only 



admit a new patient if you have enough 
beds and nurses on the ward." 

Predictive analytics would allow a 
hospital to prepare for seasonal surges in 
certain illnesses. Kotorov gave examples 
of where predictive business intelligence 
is bettering lives and saving govern- 
ments money by helping police predict 
where crimes are likely to occur, or pre- 
dict in which foster environments chil- 
dren would fit best, a sort of match.com 
beyond dating. 

"Software is better than human judg- 
ment," Kotorov said. "There are too 
many variables to evaluate. Humans are 
likely to focus on one or two they deem 
most important and likely to ignore 
many of the others. And it's hard to 
determine the relative value of each. In 
a foster setting, is race or income more 
important? Computing can handle 
these better." 

— David Rubinstein 

SD TIMES HAS TRADITIONALLY 

celebrated issues in increments of 50. 
For issue 250, we ran some ruminations 
from our readers and marked the occa- 
sion with sentimental editorials from 
some of our writers. 

But for issue 256, nothing was 
planned. I was shocked. Frankly, issue 
256 is far more important than issue 250. 
After all, it's a power of 2. I wasn't here 
for the last power of 2, issue 128. That's 
fairly shocking for me, since I've been at 
SD Times for what seems like forever. 

And at this rate, I will have to be here 
forever, too, if I want to stick around for 
issue 2 A 9. Issue 512 won't be out for 
another 11 years, and frankly, who 
knows how many of us will still be alive 



then, let alone working at SD Times. 

— Alex Handy 

YOU MAY HAVE HEARD OF 
STUXNET, which as of this writing is 
wreaking havoc on key nuclear and indus- 
trial facilities in Iran. Experts who have 
studied its code have been alarmed by the 
size and scope of it, as well as its purpose. 

"Until a few days ago, people did not 
believe a directed attack like this was 
possible," said Ralph Langner, a Ger- 
man cyber-security researcher in an 
interview with the Christian Science 
Monitor. "What Stuxnet represents is a 
future in which people with the funds 
will be able to buy an attack like this on 
the black market." 

Similarly, American researchers 
examining Stuxnet have classified it as a 
literal weapon, the first time malware 
has been given such a designation. 

Ordinary users may not be directly 
affected by malware like Stuxnet; it was 
apparently introduced to systems via a 
corrupted memory stick instead of the 
Internet, and was specifically built to 
attack systems in factories, power plants, 
chemical plants and the like. But if indus- 
trial sabotage can become precise enough 
to hide undetected in systems (Stuxnet 
incubated for at least six months before it 
was discovered), and if worms and mal- 
ware can be created and sold by black hats 
from around the world, it makes one pon- 
der if commercial programmers, who pro- 
vide the majority of security services in 
both the private and public sectors, can 
really stand a chance against a burgeoning 
black market of malware that is going 
beyond being a mere nuisance or scam. 
— Adam LoBelia 



IT organizations have 
the most vulnerabilities 
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WhiteHat Security conducted a survey of more than 2,000 websites (spanning 350 
organizations) to check on the number of vulnerabilities present in code (among other 
things). It found that the average number of vulnerabilities was 13, with IT websites having 
the most (24) and banking websites having the least (5). Websites from various other 
sectors were also surveyed. 

Source: WhiteHat Security 



LETTERS 
TO THE EDITOR 

Setting the record 
straight on OpenSolaris 

This article ("Consulting the Oracle," 
Sept. 15, p. 26) shows that you have clear- 
ly not understood what OpenSolaris was 
about. It was not a clean-room clone at all. 
It was the Solaris source code. Identical. 
Production-quality engineered Unix 
source code. Ideal for everyone working 
on any aspect of Solaris, not just program- 
mers or developers. OpenSolaris wasn't 
Unix-like. It was Unix. And it was a show- 
case and test bed for new technologies 
coming in Solaris, essentially providing 
the best of both worlds: freedom in the 
FOSS sense, and solid dependency of a 
commercially engineered OS. 
Volker A. Brandt 

Letters to SD Times should include the writer's name, 
company affiliation and contact information. Letters 
become the property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 
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I'm a person, just like you. 

I'll buy when and how I want. 

Do not call me. 

Do not make me register 
to learn about you. 

Don't try to generate me. 

I am not 'actionable.' 



AM NOT 




LEAD 



I WILL GET TO KNOW YOU on my own 

time and in my own way. I will learn about 
you myself and then I may choose to read 
your white papers, attend your webinars, 
or visit your web site. I am in control of 
the process. And if I don't get to know 
you first, you will never get my business. 



PRINT ADVERTISING - HOW BUYERS GET TO KNOW YOU 



LEARN MORE AT l-AM-NOT-A-LEAD.COM 



Based on study of SD Times readers by Readex, February 2008. How do you prefer to receive marketing information from software 
tool companies 61 % ads in print magazines, 40% presentations at trade shows, 38% vendor white papers, 29%o direct mail, 19% banners. 
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Engineering success 



Every company is a software company 
I was recently speaking with some 
developers at an organization that was 
having a difficult time keeping its soft- 
ware aligned with its other processes. 

I was surprised, as it was an engineer- 
ing organization with a good reputa- 
tion — very smart people all around, and 
the developers were very knowledgeable 
about modern languages and techniques. 
It had seemed like the type of place 
where, if anything, there might be a bit 
of a development nirvana: developers 
one day working on a piece of close-to- 
the-metal C code, crunching Big Data 
using distributed map/reduce the next, 
and making it visible to the world on the 
Web by the weekend. Everyone working 
hand-in-hand to deliver value; mutual 
exclamations of awe and appreciation 
filling the hallways; and unicorns dancing 
through rainbows in the courtyard. 

One of the great truisms of software 
development is Gerald Weinberg's "No 
matter how it looks at first, it's always a 
people problem." (Several of the other 
great truisms of software development are 
also by Weinberg. His "The Psychology of 
Computer Programming" and "Under- 
standing the Professional Programmer" 
ought to be as universally read as Brooks' 
"The Mythical Man- Month" and DeMar- 
co and Lister's "Peopleware.") A corollary 



of this is that we tend to suspect that a 
group of really smart, well-meaning peo- 
ple will inevitably optimize their process- 
es. Sadly, that's not necessarily the case. 

In this organization's case, the problem 
stemmed from the viewpoint of an orga- 
nization that very successfully produced 
large physical projects that often included 
components based on specula- 
tive engineering. In other 
words, the organization was 
skeptical that "software is dif- 
ferent," and that software 
development could not be 
tamed by the same types of 
reasoned approaches that work 
with complex civil, mechanical 
or electrical engineering. 

Here was a problem I'd 
seen before: the conflation of 
disciplined software development with 
"software engineering." Without digress- 
ing into whether or not software develop- 
ment may someday become engineering, 
it absolutely is not engineering today. Real 
engineering is as much about techniques 
for validating design decisions as it is 
about implementing them, while just 
about the only thing we know for sure 
about software development is that we fail 
when we try to make too many decisions 
before implementing the next step. 

The management at the organization, 




familiar with physical engineering, intuit- 
ed that it needed to increase the upfront 
requirements and estimation effort, while 
the software developers felt that they 
needed to move away from waterfall 
approaches and adopt more incremental 
and agile techniques. When I began talk- 
ing about tactics for introducing the latter, 
I heard a lament I did not 
anticipate: "That might work 
at a software startup, but we're 
not a software company." 

This is another common 
misconception, but again I was 
surprised to hear it in this con- 
text. Usually I hear that phrase 
from manufacturing and ser- 
vice companies that conceive 
of themselves as "really" being 
about the widget they pro- 
duce; they develop software "just" for 
increasing their production, sales and dis- 
tribution. Virtually every company devel- 
ops software in service to some higher 
need. The only places where the company 
perspective is "the software will ship when 
it's ready" are the game industry and self- 
funded startups. 

In the case of this engineering organi- 
zation, the user experience was almost 
entirely software-based, which is hardly 
unusual with today's machines. It was all 
in service to the uniqueness and reliabili- 
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Larry 
O'Brien 



ty of the underlying physical engineering, 
of course, but as long as things were not 
physically awry, the user experience was 
of control software, not of knobs and 
levers. Given how visible and important 
software was, and given the tension 
between the software and other engineer- 
ing groups, I was startled that the software 
team was unable to make their case. 

Although problems can arise even 
among a group of really smart, well- 
meaning people, the happy fact is that 
such a group has a great chance of work- 
ing through its problems. In this case, I 
think the key would be for the software 
group to start with the principles of the 
Agile Manifesto and show how they 
align with an organization's overall phi- 
losophy. Rather than starting from 
"These techniques make sense to us as 
software developers," they should start 
with "We should use the techniques that 
best serve these principles." 

While not every principle in the Mani- 
festo is necessarily going to be accepted 
by everyone, "satisfy [ing] the customer 
through early and continuous delivery of 
valuable software" is hard to beat as a 
principle. Once everyone agrees to that, it 
should be easy to make the case for trying 
specific techniques on specific projects. 

And, in my experience, nothing suc- 
ceeds like shipping working software. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 



Between Java and Ruby 



Not much was expected from this 
year's Java love fest, the JavaOne 
tradeshow At last year's event, many 
attendees and vendors predicted that 
2009 was the last instance of JavaOne. 
The acquisition of Sun by Oracle fur- 
thered this view, as Oracle already had 
no strong tradition of underwriting 
developer tradeshows. 

So when the company announced that 
it would indeed host JavaOne in 2010, I 
was delighted. This show has consistently 
been one of the better developer confabs 
on the calendar. However, Oracle sched- 
uled it to run contemporaneously with 
Oracle Open World, which by itself is one 
of the biggest technical tradeshows held 
in North America. As such, JavaOne was 
sequestered in a hotel blocks from its 
usual home along with Oracle's non-Java 
classes. 

In the time leading up to the show, 
events were promising to make it more 
and more interesting. First, Oracle sued 
Google. Then, James Gosling, the puta- 
tive father of Java, promised to launch a 
campaign to "free Java" that would cul- 
minate at JavaOne. Ultimately, though, 
both drivers provided far fewer fire- 
works than expected. Google pulled out 
of the show, and Gosling's protest 
appeared to garner no support. I believe 



I saw two shirts supporting Java freedom 
during my time on site. 

More importantly, there was no Java 
news of consequence announced during 
the show. So, rather than an event, it was 
more a series of training sessions with an 
exhibit hall thrown in. One has to hope 
Oracle will not run it in parallel with 
OpenWorld next year, as that schedule 
will relegate JavaOne to a 
footnote. 

The sparse news was in 
contrast to what was happen- 
ing in Ruby land. Rubinius, 
one of three Ruby implemen- 
tations to run Ruby on Rails 
(the other two being the 
mainline Ruby MRI and JRu- 
by), saw its first major post- 1.0 
release, with greater stability 
for running Rails and various 
performance improvements. This fol- 
lowed the release of Rails 3.0 from just a 
few weeks earlier, which cleaned up 
Rails internals and added numerous fea- 
tures that have already been covered in 
this publication. These two releases were 
already far more action than what I was 
seeing at JavaOne. 

While new releases of marquee prod- 
ucts are important for any language, it 
isn't this activity that is making me excit- 



Integration Watch 




ed about the future of Ruby as much as it 
is the progress of a single project: JRuby 
JRuby is a version of Ruby that runs on 
the JVM. It's been under fairly constant 
development by a trio of programmers 
from the Midwest, who initially worked at 
Sun and are now sponsored by Engine 
Yard. It is written entirely in Java, so it 
runs without difficulty on the JVM and 
can integrate seamlessly with 
Java's vast libraries and the 
large ecosystem of third-party 
products (an ecosystem whose 
scale dwarfs that of Ruby's). 

The language implemen- 
tation is compatible with 
Ruby MRI, and is thereby 
sufficient to run Rails and all 
major applications. More- 
over, it runs them faster than 
Ruby MRI (when you remove 
the startup penalty for Java). This is an 
important dimension, as performance is 
a constantly mentioned defect in Ruby. 
For example, in the recent Alioth 
benchmarks, Ruby MRI comes in dead 
last among all languages tested on sin- 
gle-core 32-bit and 64-bit platforms. (It 
was not run on the multicore bench- 
marks.) JRuby significantly improves on 
these results, although it remains in the 
lower half of language performance 



results, on par with Python 3. 

If performance is the biggest barrier to 
user adoption of Ruby, the generally 
unknown VM of Ruby MRI is the gating 
factor for its acceptance in IT. Managers 
and administrators are not keen to add a 
new platform to the list they already sup- 
port. With JRuby, this problem vanishes, 
as most IT departments are entirely com- 
fortable running Java on their systems. 

Java developers could find JRuby to 
be an attractive tool as well. The JSR- 
223 mechanism in Java 6 enables Java 
programs to invoke a script engine from 
inside an application. This means that if 
a Java app needs a scripting interface, it 
can add the JRuby engine to interpret 
and run the scripts. (Java defaults to call- 
ing Rhino, a JavaScript engine, but 
changing scripting engines is trivial.) 

Beyond these points, there's another 
dimension that's convincing me: JRuby 
looks like the central hub of activity in 
Ruby these days. It would not surprise me 
if it becomes the gateway to much wider 
adoption of Ruby and ultimately emerges 
as the reference implementation by sheer 
force of numbers. Such a scenario is at 
least several years off, but it's clear that for 
developers who write to the JVM, JRuby 
is an excellent solution when choosing a 
scripting or development language. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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Developers as HEROes 



Industry Watch 
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In his new book, "Empowered," co- 
author Ted Schadler tells the story of 
how a bunch of employees at big-box 
retailer Best Buy created a "twelpforce" 
to respond to customers talking about 
their experiences on Twitter. It was done 
to improve customer service, with the 
added benefit of preventing a negative 
experience from exploding all over social 
media into a public relations 
nightmare. ("DON'T SHOP 
AT BEST BUY! I bought a TV 
there. It broke, and they won't 
honor my warranty. WTF???") 

This was not a corporate 
mandate from on high; the 
project was conceived of and 
implemented by people in 
customer service, marketing, 
communications and IT. Best 
Buy had empowered its 
employees to run with their expertise in 
social media, and the effect has been 
quite positive. 

Another example from his book: Busi- 
ness information organization Thomson 
Reuters was looking for a down-market 
channel to find independent investment 
advisors and distribute information to 
them. An employee in the company's 
business development area, Ross Inglis, 
suggested using a cloud approach for con- 
tent delivery, and using Salesforce.com 
for tracking customers and payments. An 
application developer played around with 
Salesforce.com, while Inglis got business, 
marketing and IT on board. As of this 
writing, Thomson Reuters is close to real- 
izing more than a million dollars in return 
on a project that cost around US$100,000. 

Schadler describes these people as 
HEROes (Highly Empowered and 
Resourceful Operatives). These things 




that are going on the consumer market, 
he said, need to work their way into oth- 
er types of organizations. 

In software development, the idea of 
empowering individuals flies in the face of 
common IT practices and policies. Most 
organizations do not want their workers 
downloading rogue software that isn't 
managed on some central server. They 
don't want open-source code 
introduced willy-nilly into their 
organizations for fear of violat- 
ing licenses. And they certainly 
don't have the excess manpow- 
er to allow developers to go off 
on their own and create one- 
off projects. 

But Schadler, a Forrester 
Research vice president and 
principal analyst, and his col- 
league, Jeffrey Hammond, said 
developers are likely candidates to be 
HEROes. "Developers cracked the code 
on community-led, bits-at-a-time incre- 
mental development," Schadler said. 
"That was an early form of self-organizing, 
bottom-up innovation. Developers have 
always been at the bleeding edge of it." 

Hammond pointed to data that shows 
developers choosing Apache Tomcat as 
the No. 1 server they use, and that Eclipse 
tools, MySQL and Amazon EC2 use is 
widespread. "Even though IT's not com- 
fortable with it or might not condone it, 
[developer self-empowerment] is hap- 
pening." So organizations should give 
developers the autonomy to get to a bet- 
ter outcome, he said. "If you unleash your 
developers, you'll see incredibly innova- 
tive things being done." 

There is, of course, the matter of trust. 
The company has to trust that developers 
won't "go rogue," and the workers need 



to trust that the company isn't simply giv- 
ing them enough rope to hang them- 
selves with. In an agile development 
shop, "If you let the agile team work how 
it wants, what's to stop them from being 
undisciplined? You have to judge the out- 
come at the end," Hammond said. 

Schadler and his co-author, Josh 
Bernoff, describe the "HERO Compact," 
which essentially is an agreement that the 
HERO will work within the organization's 
safety principles (for developers, it means 
adhering to policies regarding downloads, 
working inside the corporate security 
structure, etc.), while the development 
manager will work with IT to manage risk, 
prioritize innovation and support the 
HERO's efforts. Yet giving workers broad- 
er control involves more than just imple- 
menting IT. It touches the legal and 
human resource departments as well. 

"This is probably the hardest shift in 
the whole 'Empowered' theme," 
Schadler said, "to get [HEROes] to trust 
that you're looking out for them." 

There will be times when an organiza- 
tion has to say "no" to a HERO. Four 
examples from the book are: when new 
laws are enacted with which the organiza- 
tion cannot yet comply; when customer 
contracts prevent you from sharing any- 
thing about the contract; when the orga- 
nization's legal team advises against it; and 
when the actions of the HERO compro- 
mise customer or employee data. 

And what about Ben Hedrington? 
He's the guy who created the technology 
behind Best Buy's "twelpforce." Accord- 
ing to Schadler, "He is so motivated to uti- 
lize Web technologies that he's become 
something of a guru in the company." 

Being a HERO certainly paid off for 
him and for Best Buy. What can you do to 
drive your company's business forward? I 



David Rubinstein 
SD Times. 
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Motorola has purchased Aloqa GmbH, which develops location- 
based software for mobile phones. Aloqa's technology will enhance 
Motorola's Motoblur product, which allows users to access various 
social networks from mobile devices, and provide real-time, loca- 
tion-based alerts, the company said. Aloqa will join Motorola Mobil- 
ity, which includes Motorola's mobile devices and home business 
units. According to Motorola, Motorola Mobility is expected to be 
spun off from the company in the first quarter of 2011. Terms of the 
Aloqa deal were not disclosed. 

EARNINGS: Microsoft raised its quarterly dividend to 16 cents per 
share, reflecting a 23% increase over the previous quarter's divi- 
dend of 13 cents per share. Investors that own Microsoft stock as 
of Nov. 18 will reap the benefits of Microsoft's dividend increase, a 
move made for the first time in two years. Microsoft distributed 
US$4.6 billion in shareholder dividends during its last fiscal year, 
which ended in June . . . Oracle announced its fiscal 2011 first- 
quarter GAAP revenues were up 48% to US$7.5 billion, while non- 
GAAP total revenues were up 50% to $7.6 billion. GAAP earnings 
per share were 27 cents, up 20% compared to this time last year. 



Non-GAAP earnings per share were up 38% to 42 cents. Accord- 
ing to Oracle President Mark Hurd, Oracle has plans to invest over 
$4 billion in research and development this coming year. In addi- 
tion, Oracle's Board of Directors declared a cash dividend of 5 
cents per share of outstanding common stock to be paid to stock- 
holders of record as of the close of business on Oct. 6, with a pay- 
ment date of Nov. 3 . . . Red Hat reported fiscal year 2011 second- 
quarter results of US$220 million in revenue, reflecting a 20% 
increase from the year prior. Subscription revenue was also up 19% 
year-over-year at $186.2 million. Its GAAP operating income was 
$34.1 million, up 24%. In addition, its operating cash flow totaled 
$64.3 million as compared to $62 million from the second quarter 
of last year . . . Adobe Systems reported strong financial results 
for its third 2010 fiscal quarter with record revenue of US$990.3 
million, compared to $697.5 million to the prior-year period. The 
third-quarter results are also up from last quarter's $943 million in 
revenue. This represents 42% year-over-year revenue growth. 
Adobe's third-quarter revenue target was $950 million to $1 billion, 
the company said. Adobe president and CEO Shantanu Narayen 
credits the boost to higher revenues in all its business segments. I 



events Calendar 



Software Craftsmanship Oct. 15-16 
North America 

Chicago 

8TH LIGHT AND OBTIVA 

scna.softwarecraftsmanship.org 

SPLASH (Formerly OOPSLA) Oct. 17-21 
Reno, Nev. 
ACM SIGPLAN 

splashcon.org 



Interop 

New York 
TECHWEB 

www.interop.com/newyork 



Oct. 18-22 



Software Test 
Professionals Conference 

Las Vegas 

REDWOOD COLLABORATIVE MEDIA 

www.stpcon.com 



Oct. 19-21 



SPTechCon Boston 


Oct. 20-22 


Boston 




BZ MEDIA 




sptechcon.com 




Adobe MAX 


Oct. 23-27 


Los Angeles 




ADOBE 




max.adobe.com 




Microsoft PDC 


Oct. 28-29 


Redmond 




MICROSOFT 




www.microsoftpdc.com 





Cloud Expo 

& Visualization Conference 

Santa Clara 
SYS-C0N 

cloudcomputingexpo.com 



Nov. 1-4 



DevConnections 


Nov. 1-4 


Las Vegas 




PENT0N MEDIA 




www.devconnections.com 




Zend/PHP Conference 


Nov. 1-4 


Santa Clara 




S&S MEDIA INC. 




www.zendcon.com 




ApacheCon 


Nov. 1-5 


Atlanta 




APACHE SOFTWARE FOUNDATION 




na.apachecon.com 




QCon San Francisco 


Nov. 1-5 


San Francisco 




QCON 




qconsf.com 




Enterprise 2.0 


Nov. 8-11 


Santa Clara 




TECHWEB 




www.e2conf.com/santaclara 




PASS Community Summit 


Nov. 8-11 


Seattle 




PASS 




www.sqlpass.org 




SC World Congress 


Nov. 10-11 


New York 




HAYMARKET MEDIA 




www.scworldcongress.com 





SC10 Supercomputing 
Conference 

New Orleans 
IEEE AND ACM 

sc10.supercomputing.org 



Nov. 13-19 



For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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All rights reserved. The price of a one-year subscription is US$179 for subscribers in the U.S., $189 in Canada, $229 elsewhere. POSTMASTER: Send address changes to SD Times, PO Box 2169, Skokie, IL 60076. SD Times subscriber services may be reached at sdtimes@halldata.com or by calling +1-847-763-9692. 



Outcomes that matter. 



Seamlessly manage all 
Microsoft SharePoint™ content 
with HP TRIM software, for best 
practice records management that 
is transparent for the user, drives 
efficiency for your business and 
integrity of your records - fast. 



Please visit us at 
HP Booth 700. 



t 





more with HP TRIM Records 
Management for SharePoint. 





ashDoarci 



Build More Powerful 
And Effective Dashboards, 



Faster 



Extensible And 

Customizable With 

An Open API 

Turn if. up I ^- ^ 




Silverlight Technology 



Full Scripting 

Capabilities With 

DundasScript™ 



More Data 
Visualization Options 



OLAP Support 



Dundas Dashboard is a highly extensible and customizable 
dashboard solution, that integrates easily into your ASP.NET, 
SharePoint, Silverlight or other web application. It provides you 
with a unified view of key metrics and a new level of strategic 
insight and decision-making. 



* 



Powered by 

Microsoft Silverlight 




j) Dundas 

J0r Data Visualization 



www.dundas.com/dashboard 

(41 6) 467-5 1 00 (800) 463-1 492 

Silverlight is a trademark of Microsoft Corporation in the United States and/or other countries. 



